CVE-2023-24010
Published: 09 January 2025
Description
An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS#7 certificate’s validation. This is caused by a non-compliant implementation of permission document verification used by some DDS vendors. Specifically, an improper use of the OpenSSL PKCS7_verify function used to validate S/MIME signatures.
Security Summary
CVE-2023-24010 is a vulnerability affecting secure DDS databus systems implemented by some DDS vendors, as well as ROS 2 nodes. It arises from a non-compliant implementation of permission document verification, specifically an improper use of the OpenSSL PKCS7_verify function to validate S/MIME signatures. This flaw enables attackers to exploit vulnerable attributes in PKCS#7 certificate validation by crafting malicious DDS Participants or ROS 2 Nodes equipped with valid certificates, leading to compromise of the targeted system. The issue is classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) with a CVSS v3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L).
An unauthenticated attacker can exploit this vulnerability remotely over the network with low complexity and no user interaction required. By deploying specially crafted DDS Participants or ROS 2 Nodes bearing valid certificates, the attacker gains full control over the secure DDS databus system, resulting in high confidentiality impact through exposure of sensitive information and low availability impact.
Advisories and related discussions are available in the following references: https://gist.github.com/vmayoral/235c02d0b0ef85a29812eff6980ff80d, https://github.com/ros2/sros2/issues/282, and https://gist.github.com/vmayoral/235c02d0b0ef85a29812eff6980ff80d.
Details
- CWE(s)