Vulnerabilidades do Themoos Essential-moos
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Themoos Essential-moos: 5 registro(s), com versões afetadas e correções.cpe:2.3:a:themoos:essential-moos
CVE-2026-85436
Alta · 7.5
CWE-191 03/09/2026
MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length
MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that allows remote attackers to corrupt heap memory by sending UDP datagrams with negative declared lengths. Attackers can send crafted UDP packets to the configured UDPListen port to trigger an oversized memcpy operation that writes past the destination buffer, causing heap corruption and denial of service.
CVE-2026-85431
Alta · 7.5
CWE-345 03/09/2026
MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection
MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source and community identifiers.
CVE-2026-85430
Crítica · 9.1
CWE-345 03/09/2026
MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishing
MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-claimed identity intact. Attackers can send crafted UDP datagrams to pShare input routes to inject messages into the local MOOS community under spoofed identities, or send malformed datagrams to crash the pShare process.
CVE-2026-85433
Crítica · 9.8
CWE-862 03/09/2026
MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration
MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD messages, allowing any publisher to reconfigure network routes and listeners at runtime. Attackers can send crafted PSHARE_CMD messages with cmd=output or cmd=input parameters to open new listeners on arbitrary addresses and redirect or duplicate bus traffic to attacker-controlled destinations.
CVE-2026-85427
Crítica · 9.8
CWE-494 03/09/2026
MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILE
MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafted MISSION_FILE message to the MOOSDB. Attackers can publish a mission file containing malicious Run entries that pAntler parses and executes via execvp() without authentication validation.