CVE-2026-102551criticalCWE-940

CVE-2026-102551: falha crítica em FreeRTOS-Plus-TCP

Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar FreeRTOS-Plus-TCP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.2epss 0.3%
Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router Advertisement. To remediate this issue, users should upgrade to version V4.4.2.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Produtos afetados
FreeRTOS · FreeRTOS-Plus-TCP
CVEs relacionadas — FreeRTOS-Plus-TCP

No mesmo produto, das mais perigosas para as menos.

CVE-2024-38373CRITICALFreeRTOS-Plus-TCP Buffer Over-Read in DNS Response ParserEPSS 0.6%CVE-2026-102552HIGHImproper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolverEPSS 0.2%