Orihcx

**Name of the Vulnerable Software and Affected Versions** Amazon Web Services (AWS) FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component (affected versions not specified) **Description** The issue allows division by zero in `prvCheckOptions()`. **Recommendations** For Amazon Web Services (AWS) FreeRTOS versions through 1.3.1, update to a version later than 1.3.1. For FreeRTOS versions up to 10.0.1, update to a version later than 10.0.1. For WITTENSTEIN WHIS Connect middleware TCP/IP component, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Amazon Web Services (AWS) FreeRTOS versions prior to 1.3.2 **Description** The issue allows remote attackers to execute arbitrary code due to mbedTLS context object corruption in the `prvSetupConnection` and `GGD SecureConnect Connect` functions within AWS TLS connectivity modules. **Recommendations** For versions prior to 1.3.2, update to version 1.3.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the AWS TLS connectivity modules until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Amazon Web Services (AWS) FreeRTOS versions through 1.3.1 FreeRTOS versions up to V10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component (affected versions not specified) **Description** The issue is related to out of bounds memory access during the parsing of NBNS packets in the `prvTreatNBNS` function, which can be used for information disclosure. **Recommendations** For Amazon Web Services (AWS) FreeRTOS versions through 1.3.1, update to a version later than 1.3.1. For FreeRTOS versions up to V10.0.1, update to a version later than V10.0.1. For WITTENSTEIN WHIS Connect middleware TCP/IP component, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Amazon Web Services (AWS) FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component (affected versions not specified) **Description** A crafted IP header can trigger a full memory space copy in the `prvProcessIPPacket` function, leading to denial of service and possibly remote code execution. **Recommendations** For Amazon Web Services (AWS) FreeRTOS versions through 1.3.1, update to a version later than 1.3.1 to resolve the issue. For FreeRTOS versions up to 10.0.1, update to a version later than 10.0.1 to resolve the issue. For WITTENSTEIN WHIS Connect middleware TCP/IP component, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Amazon Web Services (AWS) FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component (affected versions not specified) **Description** An issue in the affected software allows out of bounds access to TCP source and destination port fields in the `xProcessReceivedTCPPacket` function, potentially leaking data back to an attacker. **Recommendations** For Amazon Web Services (AWS) FreeRTOS versions through 1.3.1, update to a version later than 1.3.1. For FreeRTOS versions up to 10.0.1, update to a version later than 10.0.1. For WITTENSTEIN WHIS Connect middleware TCP/IP component, at the moment, there is no information about a newer version that contains a fix for this issue.