EUVD-2026-70809
GHSA-h924-38c9-hf7g
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-exploitable with no privileges when UDPListen is configured; only integrity is impacted - no code execution or data exfiltration established.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
4DescriptionCVE.org
MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source and community identifiers.
AnalysisAI
Unauthenticated UDP packet injection in MOOS essential-moos pMOOSBridge through version 10.0.1 allows any network-reachable attacker to inject arbitrary variables into the local MOOS publish-subscribe community by sending crafted UDP datagrams to the configured UDPListen port, with full control over spoofed source and community identifiers. The root cause is the absence of any source-address validation in the ListenLoop: the bridge historically accepted datagrams from any sender, trusting the identity claims embedded in the payload. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that pMOOSBridge is running with UDPListen explicitly configured in the mission file - this is a non-default feature that must be enabled by the operator to bridge MOOS communities over UDP. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N) reflects a straightforward network-exploitable integrity violation requiring no privileges or user interaction. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The upstream fix is available via GitHub PR #19 (https://github.com/themoos/essential-moos/pull/19) and commit d8441eac (https://github.com/themoos/essential-moos/commit/d8441eac57d04ee89e7b82723480d10a558b45d6); a tagged patched release version has not been independently confirmed at time of analysis, so operators should build from the patched commit. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct a full inventory of all systems running MOOS pMOOSBridge through version 10.0.1 and identify which have UDP listening ports exposed to untrusted networks; document operational criticality of each system. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Essential Moos
View allUnauthorized runtime route reconfiguration in MOOS essential-moos pShare through 10.0.1 lets any client of the MOOS data
Remote code execution in MOOS essential-moos pAntler through 10.0.1 lets unauthenticated attackers run arbitrary program
Unauthenticated UDP datagram injection in essential-moos pShare through 10.0.1 allows any network-reachable attacker to
Heap corruption in MOOS essential-moos through 10.0.1 allows unauthenticated remote attackers to crash the pMOOSBridge p
Share
External POC / Exploit Code
Leaving vuln.today