Lucene search
+L

18 matches found

NVD
NVD
•added 2026/10/16 6:17 p.m.•17 views

CVE-2026-102552

Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply. To remediate this issue, users should upgrade to version V4.4....

8.2CVSS0.00233EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/16 6:17 p.m.•16 views

CVE-2026-102551

Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router...

9.2CVSS0.00273EPSS
SaveExploits0References3
Mend
Mend
•added 2026/10/16 5:28 p.m.•18 views

CVE-2026-102552

Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply. To remediate this issue, users should upgrade to version V4.4....

8.2CVSS5.9AI score0.00233EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/16 5:28 p.m.•41 views

CVE-2026-102552 Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver

Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply. To remediate this issue, users should upgrade to version V4.4....

8.2CVSS0.00233EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/16 5:28 p.m.•29 views

EUVD-2026-103022

Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply. To remediate this issue, users should upgrade to version V4.4....

8.2CVSS5.9AI score0.00233EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/16 5:28 p.m.•18 views

CVE-2026-102552 Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver

Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply. To remediate this issue, users should upgrade to version V4.4....

8.2CVSS5.9AI score0.00233EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/16 5:28 p.m.•13 views

CVE-2026-102552 Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver

Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply. To remediate this issue, users should upgrade to version V4.4....

8.2CVSS5.9AI score0.00233EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/16 5:28 p.m.•34 views

CVE-2026-102552

The Amazon FreeRTOS-Plus-TCP DNS resolver is vulnerable to improper verification of the source of a communication channel in versions prior to V4.4.2 . This flaw allows a remote third-party to perform a DNS cache poisoning attack by inserting a chosen address into the device's DNS cache via a for...

8.2CVSS5.9AI score0.00233EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/16 5:27 p.m.•14 views

CVE-2026-102551 Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling

Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router...

9.2CVSS6AI score0.00273EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/16 5:27 p.m.•48 views

CVE-2026-102551

Amazon FreeRTOS-Plus-TCP is vulnerable to improper verification of the source of a communication channel in its IPv6 Router Advertisement handler prior to version V4.4.2 . A remote third-party could exploit this by sending a crafted Router Advertisement to influence an endpoint's IPv6 default gat...

9.2CVSS6AI score0.00273EPSS
SaveExploits0References3
Mend
Mend
•added 2026/10/16 5:27 p.m.•19 views

CVE-2026-102551

Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router...

9.2CVSS6AI score0.00273EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/16 5:27 p.m.•40 views

CVE-2026-102551 Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling

Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router...

9.2CVSS0.00273EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/16 5:27 p.m.•13 views

CVE-2026-102551 Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling

Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router...

9.2CVSS6AI score0.00273EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/16 5:27 p.m.•16 views

EUVD-2026-103021

Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router...

9.2CVSS6AI score0.00273EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/16 12:00 a.m.•17 views

CVE-2026-102552: Improper Verification of Source of a Communication Channel

Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply. To remediate this issue, users should upgrade to version V4.4....

8.2CVSS6AI score0.00233EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/16 12:00 a.m.•21 views

CVE-2026-102551: Improper Verification of Source of a Communication Channel

Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router...

9.2CVSS6AI score0.00273EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/16 12:00 a.m.•24 views

PT-2026-115997

Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router...

9.2CVSS6AI score0.00273EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/16 12:00 a.m.•21 views

PT-2026-115998

Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply. To remediate this issue, users should upgrade to version V4.4....

8.2CVSS6AI score0.00233EPSS
SaveExploits0References4
Rows per page
Query Builder