Vulnerabilites related to ntpd_driver_project - ntpd_driver
cve-2022-48198
Vulnerability from cvelistv5
Published
2023-01-01 00:00
Modified
2024-08-03 15:10
Severity ?
Summary
The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled time_ref_topic parameter.
References
https://github.com/vooon/ntpd_driver/issues/9
https://github.com/vooon/ntpd_driver/compare/1.2.0...1.3.0
https://github.com/vooon/ntpd_driver/compare/2.1.0...2.2.0
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:10:57.717Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vooon/ntpd_driver/issues/9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vooon/ntpd_driver/compare/1.2.0...1.3.0"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/vooon/ntpd_driver/compare/2.1.0...2.2.0"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot\u0027s behavior. This occurs because a topic name depends on the attacker-controlled time_ref_topic parameter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-01T00:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/vooon/ntpd_driver/issues/9"
        },
        {
          "url": "https://github.com/vooon/ntpd_driver/compare/1.2.0...1.3.0"
        },
        {
          "url": "https://github.com/vooon/ntpd_driver/compare/2.1.0...2.2.0"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-48198",
    "datePublished": "2023-01-01T00:00:00",
    "dateReserved": "2023-01-01T00:00:00",
    "dateUpdated": "2024-08-03T15:10:57.717Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Vulnerability from fkie_nvd
Published
2023-01-01 07:15
Modified
2024-11-21 07:32
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled time_ref_topic parameter.
References
cve@mitre.orghttps://github.com/vooon/ntpd_driver/compare/1.2.0...1.3.0Release Notes, Third Party Advisory
cve@mitre.orghttps://github.com/vooon/ntpd_driver/compare/2.1.0...2.2.0Release Notes, Third Party Advisory
cve@mitre.orghttps://github.com/vooon/ntpd_driver/issues/9Exploit, Issue Tracking, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://github.com/vooon/ntpd_driver/compare/1.2.0...1.3.0Release Notes, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://github.com/vooon/ntpd_driver/compare/2.1.0...2.2.0Release Notes, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://github.com/vooon/ntpd_driver/issues/9Exploit, Issue Tracking, Patch, Third Party Advisory
Impacted products
Vendor Product Version
ntpd_driver_project ntpd_driver *
ntpd_driver_project ntpd_driver *
openrobotics robot_operating_system -


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ntpd_driver_project:ntpd_driver:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8EB88AF8-C1A9-48C4-874E-16E4B631AE6D",
              "versionEndExcluding": "1.3.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ntpd_driver_project:ntpd_driver:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BE4BD13-56AC-4C1F-A575-37BD38C006F9",
              "versionEndExcluding": "2.2.0",
              "versionStartIncluding": "2.0.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:openrobotics:robot_operating_system:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BFEE12D7-4A38-466E-B8E0-D0FADBC00CE4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot\u0027s behavior. This occurs because a topic name depends on the attacker-controlled time_ref_topic parameter."
    },
    {
      "lang": "es",
      "value": "El componente ntpd_driver anterior a 1.3.0 y 2.x anterior a 2.2.0 para Robot Operating System (ROS) permite a atacantes, que controlan el c\u00f3digo fuente de un nodo diferente en la misma aplicaci\u00f3n ROS, cambiar el comportamiento de un robot. Esto ocurre porque el nombre de un tema depende del par\u00e1metro time_ref_topic controlado por el atacante."
    }
  ],
  "id": "CVE-2022-48198",
  "lastModified": "2024-11-21T07:32:58.147",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-01-01T07:15:10.187",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Release Notes",
        "Third Party Advisory"
      ],
      "url": "https://github.com/vooon/ntpd_driver/compare/1.2.0...1.3.0"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Release Notes",
        "Third Party Advisory"
      ],
      "url": "https://github.com/vooon/ntpd_driver/compare/2.1.0...2.2.0"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://github.com/vooon/ntpd_driver/issues/9"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Release Notes",
        "Third Party Advisory"
      ],
      "url": "https://github.com/vooon/ntpd_driver/compare/1.2.0...1.3.0"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Release Notes",
        "Third Party Advisory"
      ],
      "url": "https://github.com/vooon/ntpd_driver/compare/2.1.0...2.2.0"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://github.com/vooon/ntpd_driver/issues/9"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-668"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}