CVE-2023-50257
CVSS 3.1 Score 9.6 of 10 (high)
Details
Summary
CVE-2023-50257 is a vulnerability found in eProsima Fast DDS, a C++ implementation of the Data Distribution Service standard. This vulnerability allows a malicious attacker to forcibly disconnect a Subscriber and deny connection attempts by sending a disconnect packet to the Global Data Space. This can disrupt data transmission and disconnect Subscribers from the Publisher. The issue arises from the lack of encryption for the data and GUID values used for disconnection between nodes. It is recommended to apply SROS2 and encrypt the disconnection packet to remediate this vulnerability. The potential danger of this vulnerability is high as it can disrupt communication within an organization's network, potentially leading to data loss or service disruption.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions