CVE-2024-55030

CVE-2024-55030 corresponds to a command injection vulnerability in the NASA FPrime framework, specifically in the Command Dispatcher Service of v3.4.3. The issue enables an attacker to execute arbitrary commands due to improper handling by the dispatcher, with the base CVSS 3.1 score listed as 9....

CVE-2024-55028

CVE-2024-55028 affects NASA Fprime v3.4.3 Dashboard via a template injection in the Vue-based dashboard that enables arbitrary code execution when uploading a crafted Vue file. Reported metrics show a CRITICAL CVSS 3.1 base score (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with network exploitation, no...

CVE-2024-55029

NASA Fprime v3.4.3 is affected by multiple cross-site scripting (XSS) vulnerabilities. The CVE-2024-55029 entry reports at-network, low-impact XSS with user interaction required; CVSS v3.1 base score 6.1 (MEDIUM). No fixed version is indicated in the provided sources.

CVE-2026-41144

CVE-2026-41144 affects F Prime prior to 4.2.0. The vulnerability arises from an integer overflow in a bounds check: adding byteOffset and dataSize uses 32-bit unsigned addition that can wrap around. With a crafted DataPacket (e.g., byteOffset=0xFFFFFF9C, dataSize=100), the check is bypassed and a...