Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2018-8531

CVSS 3.0
8.8 high
EPSS
15%p97
Published
·
Modified
Analyze CVE-2018-8531 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge.

Vendors
microsoft
Products
azure internet of things edge, csharp software development kit
Weakness
CWE-787
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (15.1%)

In the news

2 stories