edgexfoundry

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

edgexfoundry records in CISA KEV

No edgexfoundry vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Edgex Foundry 3 records LOW App Service Configurable 1 record LOW Application Functions Software Development Kit 1 record LOW

Records

3 records

TI-2021-12421 CVE-2021-32753

Improper access control in edgexfoundry edgex-go

LOW 37

EdgeX Foundry is an open source project for building a common open framework for internet-of-things edge computing.

CVSS 3.1HIGH 8.3 Network No auth No interaction EPSS 0.00799 Published 2021-07-09 No fix listed CWE-284

TI-2022-13111 CVE-2022-31066 · GHSA-g63h-q855-vp3q

Configuration API in EdgeXFoundry exposes message bus credentials to local unauthenticated users

LOW 26

EdgeX Foundry is an open source project for building a common open framework for Internet of Things edge computing.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.0032 Published 2022-06-14 Fixed in 2.1.1 CWE-200

TI-2021-18110 CVE-2021-41278 · GHSA-6c7m-qwxj-mvhp

Broken or risky cryptographic algorithm in edgexfoundry app-functions-sdk-go

LOW 26

Functions SDK for EdgeX is meant to provide all the plumbing necessary for developers to get started in processing/transforming/exporting data out of the EdgeX IoT platform.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00362 Published 2021-11-18 Fixed in 2.1.0 CWE-327

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0