CVE-2026-85434
CriticalCVSS 9.1Summary
MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. Attackers can publish NODE_BROKER_PING messages with crafted HostRecord data to redirect bridged variables to attacker-controlled addresses.
Risk Assessment
Potential interception and redirection of bridged traffic, leading to data leakage and communication integrity compromise.
Recommendation
Update uFldShoreBroker to a patched version. Verify authenticity of NODE_BROKER_PING messages before creating routes.
Other vulnerabilities in MOOS-IvP uFldShoreBroker
Original NVD description (English source)
MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. Attackers can publish NODE_BROKER_PING messages with crafted HostRecord data to redirect bridged variables to attacker-controlled addresses.