CVE-2023-48316criticalCWE-787CWE-825

CVE-2023-48316: fallo crítico en azure-rtos netxduo

Azure RTOS NetX Duo Remote Code Execution Vulnerability

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear netxduo

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.8epss 4.3%
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to snmp, smtp, ftp and dtls in RTOS v6.2.1 and below. The fixes have been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
azure-rtos · netxduo
CVEs relacionadas — azure-rtos netxduo

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-48315HIGHAzure RTOS NetX Duo Remote Code Execution VulnerabilityEPSS 3.9%CVE-2023-48692CRITICALAzure RTOS NetX Duo Remote Code Execution VulnerabilityEPSS 3.1%CVE-2023-48691HIGHAzure RTOS NetX Duo Remote Code Execution VulnerabilityEPSS 3.1%