Read the docs
TI-2023-26535 Aliases CVE-2023-48696

Azure RTOS USBX Remote Code Execution Vulnerability

Priority MEDIUM 44CWE-754Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference vulnerabilities in Azure RTOS USBX. The affected components include components in host class, related to CDC ACM in RTOS v6.2.1 and below. The fixes have been included in USBX release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Why it matters now

EPSS 0.00946 61st percentileScored 2026-11-07
Fix Fixed usbx (azure-rtos): 6.3.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
azure-rtosusbxbefore 6.3.06.3.0Patch availableCNA
  • usbx Vendorazure-rtos Affected before 6.3.0 Fixed in 6.3.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:eclipse:threadx_usbx:*:*:*:*:*:*:*:*before 6.3.0VulnerableEclipse Foundation
  • cpe:2.3:a:eclipse:threadx_usbx:*:*:*:*:*:*:*:* Versions before 6.3.0 Vulnerable ·Eclipse Foundation

Remediation

  • Fix · CNA usbx (azure-rtos) Fixed in 6.3.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-48696

References

Advisory 1

  • TI-2022-16486 USBX Host CDC ECM integer underflow with buffer overflow CVSS 3.1CRITICAL 9.8
  • TI-2022-11787 Potential buffer overflow in function DFU upload in Azure RTOS USBX CVSS 3.1CRITICAL 9.8
  • TI-2022-11766 Buffer overflow on HUB descriptor in Azure RTOS USBX CVSS 3.1CRITICAL 9.8
  • TI-2022-18669 Azure RTOS USBX Host PIMA vulnerable to read integer underflow with buffer overflow CVSS 3.1CRITICAL 9.8
  • TI-2023-26533 Azure RTOS USBX Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2023-26537 Azure RTOS USBX Remote Code Execution Vulnerability CVSS 3.1CRITICAL 9.8
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences