cveboard RSS feed

CVE-2025-1077

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Remote Code Execution vulnerability in IBL Software Engineering Visual Weather and derived products (NAMIS, Aero Weather, Satellite Weather)

A security vulnerability has been identified in the IBL Software Engineering Visual Weather and derived products (NAMIS, Aero Weather, Satellite Weather). The vulnerability is present in the Product Delivery Service (PDS) component in specific server configurations where the PDS pipeline utilizes the IPDS pipeline with Message Editor Output Filters enabled. A remote unauthenticated attacker can exploit this vulnerability to send unauthenticated requests to execute the IPDS pipeline with specially crafted Form Properties, enabling remote execution of arbitrary Python code. This vulnerability could lead to a full system compromise of the affected server, particularly if Visual Weather services are run under a privileged user account—contrary to the documented installation best practices. Upgrade to the patched versions 7.3.10 (or higher), 8.6.0 (or higher).

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Visual Weather

Vendor
IBL Software Engineering
Product
Visual Weather
Platforms
Unknown
Default status
unaffected
Visual Weather · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8.2.5affectedUnavailableUnavailableUnavailableNone listed
7.3.9affectedUnavailableUnavailableUnavailableNone listed
7.3.6 (Enterprise Build)affectedUnavailableUnavailableUnavailableNone listed
8.5.2 (Enterprise Build)affectedUnavailableUnavailableUnavailableNone listed

NAMIS

Vendor
IBL Software Engineering
Product
NAMIS
Platforms
Unknown
Default status
unaffected
NAMIS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8.2.5affectedUnavailableUnavailableUnavailableNone listed
7.3.9affectedUnavailableUnavailableUnavailableNone listed
7.3.6 (Enterprise Build)affectedUnavailableUnavailableUnavailableNone listed
8.5.2 (Enterprise Build)affectedUnavailableUnavailableUnavailableNone listed

Aero Weather

Vendor
IBL Software Engineering
Product
Aero Weather
Platforms
Unknown
Default status
unaffected
Aero Weather · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8.2.5affectedUnavailableUnavailableUnavailableNone listed
7.3.9affectedUnavailableUnavailableUnavailableNone listed
7.3.6 (Enterprise Build)affectedUnavailableUnavailableUnavailableNone listed
8.5.2 (Enterprise Build)affectedUnavailableUnavailableUnavailableNone listed

Satellite Weather

Vendor
IBL Software Engineering
Product
Satellite Weather
Platforms
Unknown
Default status
unaffected
Satellite Weather · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8.2.5affectedUnavailableUnavailableUnavailableNone listed
7.3.9affectedUnavailableUnavailableUnavailableNone listed
7.3.6 (Enterprise Build)affectedUnavailableUnavailableUnavailableNone listed
8.5.2 (Enterprise Build)affectedUnavailableUnavailableUnavailableNone listed