CVE-2025-28388
CVE-2025-28388
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account.
CVSS 9.8 · Crítica · EPSS 0,6%
- Publicación
- Actualización
Pila tecnológica: python
Productos y versiones afectados
Fuentes originales
- https://openc3.com/
- https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework/
- https://github.com/OpenC3/cosmos/releases/tag/v6.0.2
- https://github.com/OpenC3/cosmos/pull/1816
- https://github.com/OpenC3/cosmos/pull/1816/commits/195974a019f375f7c5a35f48e4151babb40649ac
- https://nvd.nist.gov/vuln/detail/CVE-2025-28388