CyberRota Analysis
AI-GeneratedA vulnerability exists in the CFE Software Bus of NASA's cFS up to version 7.0.1, specifically in the CFE_SB_GetUserDataLength function, which is susceptible to integer underflow due to improper handling of the TotalMsgSize/HdrSize arguments. This flaw allows for potential remote exploitation, leading to unauthorized access or manipulation of data. Organizations utilizing this software should prioritize patching or mitigating this vulnerability to safeguard against potential attacks.
Original NVD Description
A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFE_SB_GetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfe_sb_util.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer underflow. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.