CyberRota Analysis
AI-GeneratedAn OS command injection vulnerability in NASA HyperCP allows network-adjacent attackers to execute arbitrary commands on a researcher's workstation by intercepting or spoofing responses from the oceandata.sci.gsfc.nasa.gov server. This risk arises from unsanitized parsing of server response headers, particularly during data download operations. Organizations utilizing this software should prioritize patching to mitigate the potential for unauthorized command execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to execute arbitrary system commands on the researcher's workstation.