MSRC-CVE-2021-26444 — Azure RTOS Information Disclosure Vulnerability

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What is RTOS?
Azure RTOS is an embedded development suite including a small but powerful operating system that provides reliable, ultra-fast performance for resource-constrained devices. See Azure RTOS Overview for more information.
Version 6.1.9
Exploitation of this vulnerability requires that a user plug in a malicious USB device.

What is the action required to take the update?
Developers using USBX source code need to recompile their project with the updated source code and retest their HID device application.

Security updates
6.1.9 — https://azure.microsoft.com/en-us/services/rtos

Vulnerabilities 1

Low 3.3

CVE-2021-26444

Azure RTOS Information Disclosure Vulnerability

Azure RTOS Information Disclosure Vulnerability

Microsoft Azure Real Time Operating System

Nov 10, 2021

Revision history

2021-11-09 #1
Information published.

References

CVE-2021-26444 Azure RTOS Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26444
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss