Security
Security · MOOS core-moos
MOOS core-moos Through 10.4.0 Lacks Authentication in MOOSDB Wire Protocol
MOOS core-moos versions through 10.4.0 contain no authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges. Attackers can bypass the compile-time protocol string check and connect using arbitrary client names to run privileged operations such as DB_CLEAR, which resets all variables and clears client mail queues.
Read the original coverage at CVE.org
Captured 23 minutes ago