Skip to content
OpenAdvisories
High WID-SEC-2023-3053 4 CVEs

Microsoft Azure RTOS NetX: Mehrere Schwachstellen ermöglichen Codeausführung

Published Dec 4, 2023 · Updated Dec 4, 2023 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Azure RTOS NetX ausnutzen, um beliebigen Programmcode auszuführen.

Product

Azure RTOS NetX ist ein TCP/IP IPv4 Embedded Network Stack, der für Embedded-, Echtzeit- und IoT-Anwendungen entwickelt wurde.

Vulnerabilities 4

  • Critical 9.8

    Azure RTOS NetX Duo Remote Code Execution Vulnerability

    Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include …

  • Critical 9.1

    Azure RTOS NetX Duo Remote Code Execution Vulnerability

    Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include …

  • High 8.8

    Azure RTOS NetX Duo Remote Code Execution Vulnerability

    Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include …

  • High 8.1

    Azure RTOS NetX Duo Remote Code Execution Vulnerability

    Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds write in Azure RTOS NETX Duo, that could lead to remote code execution. The affected components incl…

Revision history

  1. #1

    Initiale Fassung

References