Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-8395

FlyCASS Cockpit Access Security System (CASS) SQL Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

FlyCASS CASS and KCM systems did not correctly filter SQL queries, which made them vulnerable to attack by outside attackers with no authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FlyCASS Cockpit Access Security System (CASS)

Default version status: unaffected

  • 0 to < May 7, 2024affected

FlyCASS Known Crewmember (KCM)

Default version status: unaffected

  • 0 to < May 7, 2024affected

References