CVE-2018-8531

EPSS 15.2%

Vexday Risk Score

8Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 15.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

10 Oct 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge.

Affected products

Microsoft · Azure IoT Edge Microsoft · Hub Device Client SDK

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8531 http://www.securityfocus.com/bid/105472