3 matches found
CVE-2024-35061
NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution...
CVE-2024-35061
NASA AIT-Core v2.5.2 uses unencrypted network channels, enabling Man‑in‑the‑Middle exposure. The CVE-2024-35061 entry notes that, when chained with CVE-2024-35059 (a Pickle-related arbitrary command execution issue in NASA AIT‑Core v2.5.2), it can lead to unauthenticated remote code execution. Co...
CVE-2024-35061
NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution...