CVE-2023-24010
Published: 09 January 2025
Summary
CVE-2023-24010 is a high-severity Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) vulnerability. Its CVSS base score is 8.2 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation of Remote Services (T1210); ranked at the 28.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SC-13 (Cryptographic Protection) and SC-17 (Public Key Infrastructure Certificates).
Deeper analysis
CVE-2023-24010 is a vulnerability affecting secure DDS databus systems implemented by some DDS vendors, as well as ROS 2 nodes. It arises from a non-compliant implementation of permission document verification, specifically an improper use of the OpenSSL PKCS7_verify function to validate S/MIME signatures. This flaw enables attackers to exploit vulnerable attributes in PKCS#7 certificate validation by crafting malicious DDS Participants or ROS 2 Nodes equipped with valid certificates, leading to compromise of the targeted system. The issue is classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) with a CVSS v3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L).
An unauthenticated attacker can exploit this vulnerability remotely over the network with low complexity and no user interaction required. By deploying specially crafted DDS Participants or ROS 2 Nodes bearing valid certificates, the attacker gains full control over the secure DDS databus system, resulting in high confidentiality impact through exposure of sensitive information and low availability impact.
Advisories and related discussions are available in the following references: https://gist.github.com/vmayoral/235c02d0b0ef85a29812eff6980ff80d, https://github.com/ros2/sros2/issues/282, and https://gist.github.com/vmayoral/235c02d0b0ef85a29812eff6980ff80d.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-28074
Vulnerability details
An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS#7 certificate’s validation. This…
more
is caused by a non-compliant implementation of permission document verification used by some DDS vendors. Specifically, an improper use of the OpenSSL PKCS7_verify function used to validate S/MIME signatures.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Remote unauthenticated exploitation of DDS/ROS2 permission verification flaw enables compromise of remote services via malicious participants with valid certs.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Flaw remediation directly addresses the non-compliant PKCS7_verify implementation by requiring timely patching of the vulnerable DDS vendor software.
Public Key Infrastructure Certificates enforces proper validation, management, and revocation checking of certificates used in DDS permission documents, mitigating exploitation of vulnerable PKCS#7 attributes.
Cryptographic Protection requires approved cryptographic mechanisms and proper implementation for S/MIME signature validation, preventing improper OpenSSL PKCS7_verify usage in secure DDS systems.