GCVE - cpe:2.3:a:nasa:ait-core:2.5.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nasa:ait-core:2.5.2:*:*:*:*:*:*:*

part: a version: 2.5.2 update: *

Vendor	Nasa (`53a37713-6109-50d8-8bfa-fbb4eca64abd`)
Product	Ait Core (`28c292e3-c12b-5d52-a775-b7ec92641b54`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-35061`	vulnerable	2026-06-08 06:37:35.191270	Details available NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution. Published: 2024-05-21T00:00:00.000Z Updated: 2024-08-02T03:07:46.463Z Open on db.gcve.eu Reference links https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze https://github.com/advisories/GHSA-qv6x-53jj-vw59 https://github.com/advisories/GHSA-jqff-8g2v-642h	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-35060`	vulnerable	2026-06-08 06:37:35.190898	Details available An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying a crafted YAML file. Published: 2024-05-21T00:00:00.000Z Updated: 2024-08-02T03:07:46.420Z Open on db.gcve.eu Reference links https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze https://github.com/advisories/GHSA-45q4-h8rr-hgx2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-35059`	vulnerable	2026-06-08 06:37:35.190387	Details available An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands. Published: 2024-05-21T00:00:00.000Z Updated: 2024-08-02T03:07:46.788Z Open on db.gcve.eu Reference links https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze https://github.com/advisories/GHSA-jqff-8g2v-642h	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-35058`	vulnerable	2026-06-08 06:37:35.189925	Details available An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string. Published: 2024-05-21T00:00:00.000Z Updated: 2024-08-02T03:07:46.359Z Open on db.gcve.eu Reference links https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze https://github.com/advisories/GHSA-4gxj-5mmr-7pxq	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-35057`	vulnerable	2026-06-08 06:37:35.189450	Details available An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet. Published: 2024-05-21T00:00:00.000Z Updated: 2024-08-02T03:07:46.359Z Open on db.gcve.eu Reference links https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze https://github.com/advisories/GHSA-jf28-v5f6-cvpr	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-35056`	vulnerable	2026-06-08 06:37:35.187778	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.