CVE-2019-15137

7.5 highEPSS 1.3%

High (7.5) in eprosima fast-rtps. EPSS 1.3% chance of exploitation in the next 30 days.

The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permission expressions themselves), which can lead to unintended connections between participants in a Data Distribution Service (DDS) network.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
Published: 2019-08-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

eprosima:fast-rtps

References

https://arxiv.org/abs/1908.05310
https://github.com/eProsima/Fast-RTPS/issues/441
https://arxiv.org/abs/1908.05310
https://github.com/eProsima/Fast-RTPS/issues/441

Check your stack JSON