HIGH🇵🇱 Wersja polska

CVE-2025-25371

CVSS 7.5v3.1pub. 2025-03-25upd. 2026-04-30

NASA cFS (Core Flight System) Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Nasa Core Flight System

    APP
    Nasa
    6.7.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2025-25373CRITICAL9.8PL ✓ten sam produkt

NASA cFS Aquila — błędne uprawnienia w module zarządzania pamięcią umożliwiają RCE

CVE-2025-25374HIGH7.5ten sam produkt

In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will preve...

CVE-2025-25372HIGH7.5ten sam produkt

NASA cFS (Core Flight System) Aquila is vulnerable to segmentation fault via sending a malicious telecommand t...

CVE-2026-5475MEDIUM5.1ten sam produkt

A vulnerability was determined in NASA cFS up to 7.0.0. This impacts the function CFE_SB_TransmitMsg of the fi...

CVE-2026-5474MEDIUM5.3ten sam produkt

A vulnerability was found in NASA cFS up to 7.0.0. This affects the function CFE_MSG_GetSize of the file apps/...