Read the docs

LF-Edge, Zededa

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

LF-Edge, Zededa records in CISA KEV

No LF-Edge, Zededa vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ekuiper 3 records HIGH Eve 3 records LOW

Records

12 records

TI-2024-29055 CVE-2024-43406 · GHSA-r5ph-4jxm-6j9p

LF Edge eKuiper has a SQL Injection in sqlKvStore

Priority HIGH 73

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00894 Published 2024-08-20 Fixed in 1.14.2 CWE-89
TI-2024-34965 CVE-2024-52290 · GHSA-9cwv-pxcr-hfjc

Stored XSS in Configuration Key Functionality

Priority MEDIUM 61

LF Edge eKuiper is a lightweight internet of things (IoT) data analytics and stream processing engine.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00304 Published 2025-05-14 Fixed in 2.1.0 CWE-79
TI-2024-35324 CVE-2024-52812 · GHSA-6hrw-x7pr-4mp8

LF Edge eKuiper has Stored XSS in Rules Functionality

Priority MEDIUM 60

LF Edge eKuiper is an internet-of-things data analytics and stream processing engine.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00348 Published 2025-03-10 Fixed in 2.0.8 CWE-79
TI-2023-23360 CVE-2023-43632 · GHSA-6jp5-grgh-jw42

Freely Allocate Buffer on The Stack With Data From Socket

Priority MEDIUM 44

As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing limited functionality of the TPM to the clients.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00658 Published 2023-09-21 Fixed in 9.5.0, 0.0.0-20230519072751-977f42b07fa9 CWE-789
TI-2023-23364 CVE-2023-43636 · GHSA-5h7v-g49c-h887

Rootfs Not Protected

Priority LOW 39

In EVE OS, the “measured boot” mechanism prevents a compromised device from accessing the encrypted data located in the vault.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00131 Published 2023-09-20 Fixed in 9.5.0, 8.6.0 +1 CWE-345
TI-2023-23363 CVE-2023-43635 · GHSA-4jvr-vj2c-8q37

Insufficiently protected credentials in LF-Edge, Zededa EVE OS

Priority LOW 39

Vault Key Sealed With SHA1 PCRs The measured boot solution implemented in EVE OS leans on a PCR locking mechanism.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00117 Published 2023-09-20 Fixed in 9.5.0, 0.0.0-20230519072751-977f42b07fa9 CWE-328
TI-2023-23362 CVE-2023-43634 · GHSA-wc42-fcjp-v8vq

Config Partition Not Protected by Measured Boot

Priority LOW 39

When sealing/unsealing the “vault” key, a list of PCRs is used, which defines which PCRs are used.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00171 Published 2023-09-21 Fixed in 8.6.0, 9.5.0 +1 CWE-522
TI-2023-23361 CVE-2023-43633 · GHSA-4c4v-42hc-72p6

Debug Functions Unlockable Without Triggering Measured Boot

Priority LOW 39

On boot, the Pillar eve container checks for the existence and content of “/config/GlobalConfig/global.json”.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0017 Published 2023-09-21 Fixed in 8.6.0, 9.5.0 +1 CWE-522
TI-2023-23359 CVE-2023-43631 · GHSA-3mq9-xhgq-r7gj

SSH as Root Unlockable Without Triggering Measured Boot

Priority LOW 39

On boot, the Pillar eve container checks for the existence and content of “/config/authorized_keys”.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0017 Published 2023-09-21 Fixed in 8.6.0, 9.5.0 +1 CWE-522
TI-2023-23358 CVE-2023-43630 · GHSA-phcg-h58r-gmcq

Config Partition Not Measured From 2 Fronts

Priority LOW 39

PCR14 is not in the list of PCRs that seal/unseal the “vault” key, but due to the change that was implemented in commit “7638364bc0acf8b5c481b5ce5fea11ad44ad7fd4”, fixing this issue alone would not solve the problem of t…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00113 Published 2023-09-20 Fixed in 9.5.0, 0.0.0-20230126065759-d9383a7ee4e1 CWE-328
TI-2023-23365 CVE-2023-43637 · GHSA-g7vp-j25f-h34p

Vault Key Partially Predetermined

Priority LOW 35

Due to the implementation of "deriveVaultKey", prior to version 7.10, the generated vault key would always have the last 16 bytes predetermined to be "arfoobarfoobarfo".

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00142 Published 2023-09-21 Fixed in 7.10, 0.0.0-20220310190112-c0c966dc31e2 CWE-321
Open these records in search →