CyberRota Analysis
AI-GeneratedThe vulnerability affects the MOOS-IvP software, specifically in the functions isQuoted(), isBraced(), and isChevroned(), which improperly handle whitespace during string processing. This buffer over-read can allow attackers to exploit the system by sending specially crafted NODE_REPORT messages, potentially leading to unauthorized memory access and information disclosure. Organizations using MOOS-IvP should prioritize patching this vulnerability to mitigate risks associated with memory corruption and data leakage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions that strip whitespace but index using the original string length. Attackers can send NODE_REPORT messages with leading or trailing whitespace to read past buffer bounds and access adjacent memory.