HIGH🇵🇱 Wersja polska

CVE-2025-25371

CVSS 7.5v3.1pub. 2025-03-25upd. 2026-04-30

NASA cFS (Core Flight System) Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Nasa Core Flight System

    APP
    Nasa
    6.7.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2025-25373CRITICAL9.8PL ✓same product

NASA cFS Aquila — błędne uprawnienia w module zarządzania pamięcią umożliwiają RCE

CVE-2025-25374HIGH7.5same product

In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will preve...

CVE-2025-25372HIGH7.5same product

NASA cFS (Core Flight System) Aquila is vulnerable to segmentation fault via sending a malicious telecommand t...

CVE-2026-5475MEDIUM5.1same product

W NASA cFS do wersji 7.0.0 wykryta została podatność w funkcji CFE_SB_TransmitMsg pliku cfe_sb_priv.c komponen...

CVE-2026-5474MEDIUM5.3same product

W NASA cFS do wersji 7.0.0 znaleziono podatność w funkcji CFE_MSG_GetSize pliku apps/to_lab/fsw/src/to_lab_pas...