Vendor

edgexfoundry

3 known vulnerabilities.

Products

edgex-go 2 app-functions-sdk-go 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.9

CVE-2022-31066

Configuration API in EdgeXFoundry exposes message bus credentials to local unauthenticated users

EdgeX Foundry is an open source project for building a common open framework for Internet of Things edge computing. Prior to version 2.1.1, the /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, m…

edgexfoundry edgex-go github.com/edgexfoundry/app-functions-sdk-go/v2 github.com/edgexfoundry/app-functions-sdk-go Go

Jun 14, 2022
Medium 5.4

CVE-2021-41278 Public exploit

Broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via unspecified vectors

Functions SDK for EdgeX is meant to provide all the plumbing necessary for developers to get started in processing/transforming/exporting data out of the EdgeX IoT platform. In affected versions broken encryption in app-functions-sdk “AES” transform in EdgeX …

edgexfoundry app-functions-sdk-go github.com/edgexfoundry/app-functions-sdk-go github.com/edgexfoundry/app-functions-sdk-go/v2 Go

Nov 18, 2021