CVE-2019-19627 - Vulnerability Details - OpenCVE

SROS 2 0.8.1 (after CVE-2019-19625 is mitigated) leaks ROS 2 node-related information regardless of the rtps_protection_kind configuration. (SROS2 provides the tools to generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2.)

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

AV:N/AC:L/Au:N/C:P/I:N/A:N

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Ros	Sros2

Configuration 1 [-]

cpe:2.3:a:ros:sros2:0.8.1:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://asciinema.org/a/yuGkBlaPC33wqL4qABRlgxBkd
https://github.com/aliasrobotics/RVD/issues/922
https://github.com/ros-swg/turtlebot3_demo
https://github.com/ros2/sros2/issues/172
https://ros-swg.github.io/ROSCon19_Security_Workshop/

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-12-06T15:09:34

Updated: 2024-08-05T02:25:11.557Z

Reserved: 2019-12-06T00:00:00

Link: CVE-2019-19627

Vulnrichment

No data.

NVD

Status : Modified

Published: 2019-12-06T16:15:11.357

Modified: 2024-11-21T04:35:05.163

Link: CVE-2019-19627

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "SROS 2 0.8.1 (after CVE-2019-19625 is mitigated) leaks ROS 2 node-related information regardless of the rtps_protection_kind configuration. (SROS2 provides the tools to generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2.)"}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-12-06T15:09:34", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/aliasrobotics/RVD/issues/922"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/ros2/sros2/issues/172"}, {"tags": ["x_refsource_MISC"], "url": "https://asciinema.org/a/yuGkBlaPC33wqL4qABRlgxBkd"}, {"tags": ["x_refsource_MISC"], "url": "https://ros-swg.github.io/ROSCon19_Security_Workshop/"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/ros-swg/turtlebot3_demo"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-19627", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "SROS 2 0.8.1 (after CVE-2019-19625 is mitigated) leaks ROS 2 node-related information regardless of the rtps_protection_kind configuration. (SROS2 provides the tools to generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2.)"}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N", "version": "3.0"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/aliasrobotics/RVD/issues/922", "refsource": "MISC", "url": "https://github.com/aliasrobotics/RVD/issues/922"}, {"name": "https://github.com/ros2/sros2/issues/172", "refsource": "MISC", "url": "https://github.com/ros2/sros2/issues/172"}, {"name": "https://asciinema.org/a/yuGkBlaPC33wqL4qABRlgxBkd", "refsource": "MISC", "url": "https://asciinema.org/a/yuGkBlaPC33wqL4qABRlgxBkd"}, {"name": "https://ros-swg.github.io/ROSCon19_Security_Workshop/", "refsource": "MISC", "url": "https://ros-swg.github.io/ROSCon19_Security_Workshop/"}, {"name": "https://github.com/ros-swg/turtlebot3_demo", "refsource": "MISC", "url": "https://github.com/ros-swg/turtlebot3_demo"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T02:25:11.557Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/aliasrobotics/RVD/issues/922"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/ros2/sros2/issues/172"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://asciinema.org/a/yuGkBlaPC33wqL4qABRlgxBkd"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://ros-swg.github.io/ROSCon19_Security_Workshop/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/ros-swg/turtlebot3_demo"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2019-19627", "datePublished": "2019-12-06T15:09:34", "dateReserved": "2019-12-06T00:00:00", "dateUpdated": "2024-08-05T02:25:11.557Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ros:sros2:0.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "E2332494-1342-4DDB-8C8F-FC27B3292728", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "SROS 2 0.8.1 (after CVE-2019-19625 is mitigated) leaks ROS 2 node-related information regardless of the rtps_protection_kind configuration. (SROS2 provides the tools to generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2.)"}, {"lang": "es", "value": "SROS versi\u00f3n 2 0.8.1 (despu\u00e9s de que CVE-2019-19625 es mitigado) pierde informaci\u00f3n relacionada con el nodo ROS 2 independientemente de la configuraci\u00f3n de rtps_protection_kind. (SROS2 provee las herramientas para generar y distribuir claves para Robot Operating System 2 y usa los plugins de seguridad subyacentes de DDS desde ROS 2.)"}], "id": "CVE-2019-19627", "lastModified": "2024-11-21T04:35:05.163", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "cve@mitre.org", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-12-06T16:15:11.357", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://asciinema.org/a/yuGkBlaPC33wqL4qABRlgxBkd"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/aliasrobotics/RVD/issues/922"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://github.com/ros-swg/turtlebot3_demo"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://github.com/ros2/sros2/issues/172"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://ros-swg.github.io/ROSCon19_Security_Workshop/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://asciinema.org/a/yuGkBlaPC33wqL4qABRlgxBkd"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/aliasrobotics/RVD/issues/922"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/ros-swg/turtlebot3_demo"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/ros2/sros2/issues/172"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://ros-swg.github.io/ROSCon19_Security_Workshop/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}