Skip to main content

Azure Internet Of Things Edge

1 CVEs product

Monthly

CVE-2018-8531 Oct 10, 13:29 HIGH PATCH This Week

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Microsoft Csharp Software Development Kit +1
NVD
CVSS 3.0
8.8
EPSS
15.2%
EPSS 15% CVSS 8.8
HIGH PATCH This Week

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy