PT-2023-30901
CVE-2023-48691
·
Published
2023-12-04
·
Updated
2023-12-08
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Azure RTOS NetX Duo versions 6.2.1 and below
Description
The issue is related to an out-of-bounds write in Azure RTOS NetX Duo that could lead to remote code execution. The affected components include processes related to the IGMP protocol.
Recommendations
For Azure RTOS NetX Duo versions 6.2.1 and below, upgrade to NetX Duo release 6.3.0 to resolve the issue.
As a temporary workaround, consider restricting access to the IGMP protocol-related processes until the upgrade is applied.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾