This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: OpenC3 COSMOS Script Runner allows users to run Python/Ruby scripts. ๐ **Consequence**: Scripts bypass API checks to access the shared Docker network.โฆ
๐ก๏ธ **CWE**: CWE-250 (Execution of Code with unnecessary privileges). ๐ **Flaw**: Lack of network isolation between the Script Runner container and other services (Redis, Buckets).โฆ
๐ **Auth Required**: Yes. PR:L (Privileges Required: Low). ๐ซ **UI**: None required. โ ๏ธ **Threshold**: Any user with permission to **create and run scripts** can exploit this. No complex config needed.
Q6Is there a public Exp? (PoC/Wild Exploitation)
๐ **Public Exp?**: No specific PoC provided in data. ๐ **Wild Exploitation**: Low risk currently. ๐ **Note**: References point to GitHub release/advisory, but no active exploit code is listed in the provided data.
Q7How to self-check? (Features/Scanning)
๐ **Check**: Look for OpenC3 COSMOS versions < 7.0.0-rc3. ๐งช **Test**: If you have script execution rights, check if you can reach Redis/Bucket services via the script runner container network.โฆ