CVE-2018-8531

EPSS 15.2%

Vexday Risk Score

8Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 15.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 oct 2018Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge.

Productos afectados

Microsoft · Azure IoT Edge Microsoft · Hub Device Client SDK

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8531 http://www.securityfocus.com/bid/105472