PT-2026-85300 · Unknown · Moos Core-Moos
CVSS v3.1
7.1
High
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
MOOS core-moos versions prior to 10.4.1
Description
The SuicidalSleeper component contains a flaw where a hard-coded passphrase is used for multicast command authorization. A peer with multicast access can enumerate processes and send termination commands to trigger a process shutdown by utilizing the default multicast group and port with the known passphrase.
Recommendations
Update MOOS core-moos to a version newer than 10.4.0.
Fix
Using Hardcoded Credentials
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Moos Core-Moos