CyberRota Analysis
AI-GeneratedThe MOOS-IvP uFldShoreBroker version 24.8.1 is vulnerable due to its failure to authenticate node ping messages, allowing attackers to exploit this weakness by sending malicious NODE_BROKER_PING messages. This can lead to unauthorized redirection of bridged variables to addresses controlled by the attacker, potentially compromising sensitive data and system integrity. Organizations utilizing this software should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. Attackers can publish NODE_BROKER_PING messages with crafted HostRecord data to redirect bridged variables to attacker-controlled addresses.