CyberRota Analysis
AI-GeneratedThe vulnerability affects the Yamcs mission control framework prior to version 5.12.7, allowing authenticated users with the ChangeMissionDatabase privilege to exploit a server-side code injection flaw in the algorithm evaluation engine. This can lead to remote code execution on the host operating system by injecting malicious Java code through the mission database REST API. Organizations using affected versions of Yamcs should prioritize upgrading to versions 5.12.7 or 5.13.0 to mitigate this critical risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Yamcs is a mission control framework. Prior to 5.12.7, a server-side code injection vulnerability existed in the Yamcs algorithm evaluation engine org.yamcs.algorithms.JavaExprAlgorithmExecutionFactory, which dynamically compiled and evaluated user-controlled algorithm text through the Janino compiler without enforcing a secure sandbox, so an authenticated user with the ChangeMissionDatabase privilege could override an existing algorithm's text via the mission database REST API and inject Java code (for example using java.lang.Runtime) to achieve remote code execution on the underlying host operating system. This issue is fixed in versions 5.12.7 and 5.13.0, which disable algorithm editing by default.
Related CVEs
Other vulnerabilities affecting the same vendor(s)