Live Access Server (LAS) vulnerabilities
1 known vulnerability in Live Access Server (LAS) from National Oceanic and Atmospheric Administration (NOAA). 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
Live Access Server (LAS): Improper Neutralization of Special Elements used in an OS Command
Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, a remote, unauthenticated attacker can execute arbitrary OS commands. Fixe