CVE-2018-1000045
Last modified
CVE-2018-1000045 is a vulnerability of currently unknown severity. NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library (Weather data) that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. EPSS estimates a 1.75% chance of exploitation in the next 30 days.
Description
NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library (Weather data) that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.1.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nasa | Singledop | 1.0 |
References
- https://github.com/nasa/SingleDop/pull/19Issue Tracking, Patch
- https://github.com/nasa/SingleDop/pull/19Issue Tracking, Patch
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-1000045?
How severe is CVE-2018-1000045?
How do I fix CVE-2018-1000045?
Are you affected by CVE-2018-1000045?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
