-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PythonPython| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| ni-measurementlink-service | pip | < 1.1.1 | 1.1.1 |
| ni-measurementlink-service | pip | >= 1.2.0.dev0, < 1.2.0 | 1.2.0 |
Miggo AIRoot Cause AnalysisThe critical vulnerability stemmed from binding the service to all network interfaces (IPv6 '::' wildcard) instead of loopback. The commit diff shows the fix explicitly sets host='[::1]' (IPv6 loopback) in service_manager.py's start method. This matches CWE-420 (Unprotected Alternate Channel) as it improperly exposed a communication channel thought to be restricted.