CVE-2025-25374

HIGH

NASA cFS Aquila - Denial of Service via External Application Launch Prevention

Title source: llm

Description

In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service.

References (1)

Core 1

Core References

Exploit, Technical Description

https://visionspace.com/nasa-cfs-version-aquila-software-vulnerability-assessment/

Scores

CVSS v3 7.5

EPSS 0.0046

EPSS Percentile 36.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-400

Status published

Products (2)

nasa/cfs aquila

nasa/core_flight_system 6.7.0

Published Mar 25, 2025

Tracked Since Feb 18, 2026