CVE Intelligence

Vulnerabilidades do National Oceanic and Atmospheric Administration (NOAA) Live Access Server (LAS)

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam National Oceanic and Atmospheric Administration (NOAA) Live Access Server (LAS): 1 registro(s), com versões afetadas e correções.

CVE-2025-62193 Crítica · 9.8 CWE-78 15/01/2026
NOAA PMEL Live Access Server (LAS) PyFerret command injection
Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, a remote, unauthenticated attacker can execute arbitrary OS commands. Fixed in a version of 'gov.noaa.pmel.tmap.las.filter.RequestInputFilter.java' from 2025-09-24.