CyberRota Analysis
AI-GeneratedThe vulnerability affects the Yamcs mission control framework, specifically its script evaluation engine for Python algorithms, which allows authenticated users with the ChangeMissionDatabase privilege to execute arbitrary Java classes, leading to potential remote code execution on the host system. Organizations using versions prior to 5.12.7 should prioritize patching to mitigate this critical risk, as it could allow attackers to manipulate mission-critical operations. Immediate action is recommended for those managing sensitive environments reliant on Yamcs.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Yamcs is a mission control framework. Prior to 5.12.7, the Yamcs script evaluation engine for Python algorithms dynamically compiled and evaluated user-controlled algorithm text using Jython through the JSR-223 ScriptEngine API without enforcing a secure sandbox, so an authenticated user with the ChangeMissionDatabase privilege could override an existing Python algorithm's logic through the mission database REST API and import and execute arbitrary Java classes such as java.lang.Runtime to achieve remote code execution on the underlying host operating system. This issue is fixed in versions 5.12.7 and 5.13.0, which disable algorithm editing by default.
Related CVEs
Other vulnerabilities affecting the same vendor(s)