Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

14 records

Vendor: AWS Component: Amazon Web Services Freertos Clear all filters
TI-2019-09825 CVE-2019-13120 · GHSA-vvg7-3vpg-wq97

Amazon FreeRTOS up to and including v1.4.8 lacks length checking in…

Priority LOW 35

Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents on a device to an attacker.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0119 Published 2019-10-07 No fix listed CWE-125
TI-2018-11858 CVE-2018-16528 · GHSA-x364-mjf7-297c

Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute…

Priority MEDIUM 41

Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corruption in prvSetupConnection and GGD_SecureConnect_Connect in AWS TLS connectivity…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.03291 Published 2018-12-06 No fix listed CWE-20
TI-2018-11857 CVE-2018-16527 · GHSA-r4r9-268q-qj6x

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with…

Priority LOW 30

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of ICMP packets in prvPro…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.0185 Published 2018-12-06 No fix listed CWE-200
TI-2018-11856 CVE-2018-16526 · GHSA-x25v-p526-wx8v

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with…

Priority MEDIUM 43

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to leak information or execute arbitrary code…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.04443 Published 2018-12-06 No fix listed
TI-2018-11855 CVE-2018-16525 · GHSA-p44f-9m6f-62jr

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with…

Priority MEDIUM 43

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak information…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.04443 Published 2018-12-06 No fix listed
TI-2018-11854 CVE-2018-16524 · GHSA-6hm7-35p7-wmmp

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with…

Priority LOW 30

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of TCP options in prvChec…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01829 Published 2018-12-06 No fix listed CWE-200