Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Amazon Web Services AWS IoT Device SDK v2 for C++, AWS IoT Device SDK v2 for Node.js 1.12.7, 1.5.3 Clear all filters
TI-2021-17754 CVE-2021-40829 · GHSA-743r-5g92-5vgf

TLS hostname validation issues within AWS IoT Device SDKs on macOS

Priority LOW 38

Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior to 1.4.2), Python (versions prior to 1.6.1), C++ (versions prior to 1.12.7) and Node.js (versions prior to 1.5.3) did not verify server certif…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00387 Published 2021-11-22 Fixed in 1.4.2, 1.6.1 +3 CWE-295
TI-2021-17753 CVE-2021-40828 · GHSA-94jq-q5v2-76wj

TLS hostname validation issues within AWS IoT Device SDKs on Windows

Priority LOW 38

Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior to 1.3.3), Python (versions prior to 1.5.18), C++ (versions prior to 1.12.7) and Node.js (versions prior to 1.5.1) did not verify server certi…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00411 Published 2021-11-22 Fixed in 1.3.3, 1.5.18 +3 CWE-295