Lucene search
K

EUVD-2021-0029

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 2 Views

AWS IoT Device SDK versions prior to specified did not verify server certificate hostname on macOS.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2021-40829
23 Nov 202102:20
circl
CNNVD
Amazon AWS IoT Device SDK 信任管理问题漏洞
23 Nov 202100:00
cnnvd
CVE
CVE-2021-40829
22 Nov 202123:41
cve
Cvelist
CVE-2021-40829 TLS hostname validation issues within AWS IoT Device SDKs on macOS
22 Nov 202123:41
cvelist
Github Security Blog
Improper certificate management in AWS IoT Device SDK v2
24 Nov 202121:11
github
GitLab Advisory Database
Improper Certificate Validation
23 Nov 202100:00
gitlab
NVD
CVE-2021-40829
23 Nov 202100:15
nvd
OSV
GHSA-743R-5G92-5VGF Improper certificate management in AWS IoT Device SDK v2
24 Nov 202121:11
osv
OSV
PYSEC-2021-862
23 Nov 202100:15
osv
Prion
Code injection
23 Nov 202100:15
prion
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "251ef922-067b-3b3f-a27b-8b6d14428ba2",
        "vendor": {
          "name": "Amazon Web Services"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1e97d4a5-2565-3f54-862d-f2101e2b689d",
        "product": {
          "name": "AWS-C-IO"
        },
        "product_version": "unspecified <0.10.4"
      },
      {
        "id": "63b24a86-d916-3729-a3ec-ca9677bfd893",
        "product": {
          "name": "AWS IoT Device SDK v2 for Node.js"
        },
        "product_version": "unspecified <1.5.3"
      },
      {
        "id": "6ec4ef93-85b4-31c8-af16-c91be5119f78",
        "product": {
          "name": "AWS IoT Device SDK v2 for Java "
        },
        "product_version": "unspecified <1.4.2"
      },
      {
        "id": "844b2e62-e88d-3e00-b417-b8ba8fc2f0ef",
        "product": {
          "name": "AWS IoT Device SDK v2 for Python"
        },
        "product_version": "unspecified <1.6.1"
      },
      {
        "id": "89055696-eb99-306e-9d04-0efb45672b00",
        "product": {
          "name": "AWS IoT Device SDK v2 for C++"
        },
        "product_version": "unspecified <1.12.7"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 Oct 2025 00:30Current
8.6High risk
Vulners AI Score8.6
CVSS 3.16.3 - 8.8
CVSS 25.8
EPSS0.00102
2