Remote code execution

2018-02-0923:29:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.3%

JSON

NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.4.

CPENameOperatorVersion
pyblockge1.0
pyblockle1.3

CPE	Name	Operator	Version
	pyblock	ge	1.0
	pyblock	le	1.3

References

github.com/nasa/PyBlock/pull/5