CVE-2019-19625 HIGH

CVE-2019-19625

Vendor N/A
Product n/a
Published December 6, 2019
Last update August 5, 2024

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.0/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N

What the vulnerability does

01Description

SROS 2 0.8.1 (which provides the tools that generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2) leaks node information due to a leaky default configuration as indicated in the policy/defaults/dds/governance.xml document.

Key dates

02Disclosure timeline

December 6, 2019 CVE published
August 5, 2024 Record updated