| Package | Affected versions | Patched versions |
|---|---|---|
| moos-ivp | < 24.8.1 | 24.8.1 |
MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. Attackers can publish NODE_BROKER_PING messages with crafted HostRecord data to redirect bridged variables to attacker-controlled addresses.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free