GCVE - cpe:2.3:a:nasa:core_flight_system:6.7.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nasa:core_flight_system:6.7.0:*:*:*:*:*:*:*

part: a version: 6.7.0 update: *

Vendor	Nasa (`53a37713-6109-50d8-8bfa-fbb4eca64abd`)
Product	Core Flight System (`5c0b7176-08c5-5300-899a-8623f582fa5f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/nasa/cfs`	purl2cpe	2026-06-01 10:15:37.568481

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-25374`	vulnerable	2026-06-08 07:12:51.154902	Details available In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service. Published: 2025-03-25T00:00:00.000Z Updated: 2025-03-26T13:54:30.732Z Open on db.gcve.eu Reference links https://visionspace.com/nasa-cfs-version-aquila-software-vulnerability-assessment/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-25373`	vulnerable	2026-06-08 07:12:51.154527	Details available The Memory Management Module of NASA cFS (Core Flight System) Aquila has insecure permissions, which can be exploited to gain an RCE on the platform. Published: 2025-03-25T00:00:00.000Z Updated: 2025-03-26T14:43:11.707Z Open on db.gcve.eu Reference links https://visionspace.com/nasa-cfs-version-aquila-software-vulnerability-assessment/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-25372`	vulnerable	2026-06-08 07:12:51.154224	Details available NASA cFS (Core Flight System) Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memory Management Module. Published: 2025-03-25T00:00:00.000Z Updated: 2025-03-26T13:58:01.944Z Open on db.gcve.eu Reference links https://visionspace.com/nasa-cfs-version-aquila-software-vulnerability-assessment/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-25371`	vulnerable	2026-06-08 07:12:51.153717	Details available NASA cFS (Core Flight System) Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system. Published: 2025-03-25T00:00:00.000Z Updated: 2025-03-26T14:00:25.948Z Open on db.gcve.eu Reference links https://visionspace.com/nasa-cfs-version-aquila-software-vulnerability-assessment/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.