NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution.
References
Configurations
No configuration.
History
21 Nov 2024, 09:19
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/advisories/GHSA-jqff-8g2v-642h - | |
| References | () https://github.com/advisories/GHSA-qv6x-53jj-vw59 - | |
| References | () https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze - |
17 Jul 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 Jul 2024, 02:01
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.3 |
| CWE | CWE-311 |
22 May 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| Summary | (en) NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution. |
21 May 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-21 19:15
Updated : 2024-11-21 09:19
NVD link : CVE-2024-35061
Mitre link : CVE-2024-35061
CVE.ORG link : CVE-2024-35061
JSON object : View
Products Affected
No product.
CWE
CWE-311
Missing Encryption of Sensitive Data