CVE-2024-30964

Summary

CVE-2024-30964 is an Insecure Permissions vulnerability affecting Open Robotics Robotic Operating System 2 (ROS2) and specifically the navigation2-ROS2-humble and navigation 2-humble packages. A local attacker can exploit this vulnerability by manipulating the initial_pose_sub thread created by nav2_bt_navigator. Successful exploitation allows the attacker to execute arbitrary code, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.