| Package | Affected versions | Patched versions |
|---|---|---|
| moos-ivp | < 24.8.1 | 24.8.1 |
MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRY_SHORE_HOST messages on the vehicle bus, allowing any publisher to enroll attacker-controlled shore routes. Attackers can publish malicious shore route messages to receive bridged vehicle traffic including sensor data and control information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free