72 matches found
OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)
Summary COSMOS reads configuration from a user-writable overlay targetsmodified/ before the read-only plugin-installed targets/ tree, and the config subsystem executes code on those files: ConfigParser renders every file as ERB by default, a GENERICREADCONVERSION / GENERICWRITECONVERSION block is...
9.9CVSS6.8AI score
SaveExploits0References5Affected Software1
20