CyberRota Analysis
AI-GeneratedA command injection vulnerability exists in the run_openlane/view_waveform component of NellyW8 MCP4EDA 1.0.0, allowing an attacker with local access to manipulate the design_name/vcd_file argument. This could lead to unauthorized command execution within the affected system. Users and administrators of this software should prioritize addressing this issue to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0. Affected by this vulnerability is an unknown functionality of the component run_openlane/view_waveform. The manipulation of the argument design_name/vcd_file leads to command injection. Local access is required to approach this attack. The project was informed of the problem early through an issue report but has not responded yet.