CyberRota Analysis
AI-GeneratedYamcs versions prior to 5.12.8 and 5.13.2 lack proper authorization checks in several APIs, allowing authenticated low-privilege users to access sensitive packet and event index metadata, manipulate COP-1 link states, and alter simulation time. This vulnerability can lead to unauthorized disclosure of telemetry data, disruption of telecommand handling, and potential impacts on system integrity and availability. Organizations using affected versions of Yamcs should prioritize upgrading to the patched versions to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits authorization checks in IndexesApi.listPacketIndex, IndexesApi.listEventIndex, Cop1Api.disable, Cop1Api.resume, Cop1Api.initialize, Cop1Api.updateConfig, and TimeApi.setTime. An authenticated low-privilege user can read packet and event index metadata without ObjectPrivilegeType.ReadPacket, alter COP-1 link state without SystemPrivilege.ControlLinks, and manipulate simulation time. These operations can disclose telemetry metadata, disrupt telecommand handling, and affect system integrity and availability. This issue is fixed in versions 5.12.8 and 5.13.2.