Vulnerabilities (CVE)

Filtered by vendor Nasa Subscribe
Filtered by product Cfs
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-25373 1 Nasa 1 Cfs 2025-04-03 N/A 9.8 CRITICAL
The Memory Management Module of NASA cFS (Core Flight System) Aquila has insecure permissions, which can be exploited to gain an RCE on the platform.
CVE-2025-25372 1 Nasa 1 Cfs 2025-04-03 N/A 7.5 HIGH
NASA cFS (Core Flight System) Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memory Management Module.
CVE-2025-25371 1 Nasa 1 Cfs 2025-04-03 N/A 7.5 HIGH
NASA cFS (Core Flight System) Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system.
CVE-2025-25374 1 Nasa 1 Cfs 2025-04-01 N/A 7.5 HIGH
In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service.