MSRC-CVE-2021-42302 — Azure RTOS Elevation of Privilege Vulnerability

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What is RTOS?
Azure RTOS is an embedded development suite including a small but powerful operating system that provides reliable, ultra-fast performance for resource-constrained devices. See Azure RTOS Overview for more information.
Version 6.1.9
Exploitation of this vulnerability requires that a user plug in a malicious USB device.

What is the action required to take the update?
You need to recompile your project with updated USBX source code if the project uses host audio/video/CDC-ECM/PIMA, or device storage class.

Security updates
6.1.9 — https://azure.microsoft.com/en-us/services/rtos

Vulnerabilities 1

Medium 6.6

CVE-2021-42302

Azure RTOS Elevation of Privilege Vulnerability

Azure RTOS Elevation of Privilege Vulnerability

Microsoft Azure Real Time Operating System

Nov 10, 2021

Revision history

2021-11-09 #1
Information published.

References

CVE-2021-42302 Azure RTOS Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42302
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss