SSA-357982 V1.0: Path Traversal Vulnerability in ROS# Before 2.2.2

Risk Summary

<p>ROS# contains a ROS service file_server, that before version 2.2.2 contains a path traversal vulnerability which could allow an attacker to access, i.e. read and write, arbitrary files, which are accessible with the user rights of the user that runs the service, on the system that hosts service.</p> <p>Siemens has released a new version for ROS# and recommends to update to the latest version.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)