CVE-2018-8531

EPSS 15.2%

Vexday Risk Score

8Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 15.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 out 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge.

Produtos afetados

Microsoft · Azure IoT Edge Microsoft · Hub Device Client SDK

Referências

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8531 http://www.securityfocus.com/bid/105472