CVE-2018-16527: Exposure of Sensitive Information to an Unauthorized Actor

Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of ICMP packets in prvProcessICMPPacket...

CVE-2018-16522: Access of Uninitialized Pointer

Amazon Web Services AWS FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETSSetSockOpt...

CVE-2018-16524: Exposure of Sensitive Information to an Unauthorized Actor

Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of TCP options in prvCheckOptions...

PT-2018-13616

Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions prior to 1.3.2 Description The issue allows remote attackers to execute arbitrary code due to mbedTLS context object corruption in the prvSetupConnection and GGD SecureConnect Connect functions within...

CVE-2018-16528: Improper Input Validation

Amazon Web Services AWS FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corruption in prvSetupConnection and GGDSecureConnectConnect in AWS TLS connectivity modules...

PT-2018-13637

Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to V10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue allows any received DNS response to be accepted...

PT-2018-13610

Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions prior to 1.3.2 Description The issue is related to an uninitialized pointer free in the SOCKETS SetSockOpt function. Recommendations For versions prior to 1.3.2, update to version 1.3.2 or later to...

CVE-2018-16525: Undefined Security Weakness

Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak information because of a Buffer Overflow during parsing of DNS\LLMNR packets in...

AWS FreeRTOS Bugs Allow Compromise of IoT Devices

Researchers have found that a popular Internet of Things real-time operating system – FreeRTOS – is riddled with serious vulnerabilities. The bugs could allow hackers to crash connected devices in smart homes or critical infrastructure systems, leak information from the devices’ memory, and take...

Critical Flaws Found in Amazon FreeRTOS IoT Operating System

A security researcher has discovered several critical vulnerabilities in one of the most popular embedded real-time operating systems—called FreeRTOS—and its other variants, exposing a wide range of IoT devices and critical infrastructure systems to hackers. What is FreeRTOS Amazon, WHIS OpenRTOS...

Critical Flaws Found in Amazon FreeRTOS IoT Operating System

A security researcher has discovered several critical vulnerabilities in one of the most popular embedded real-time operating systems—called FreeRTOS—and its other variants, exposing a wide range of IoT devices and critical infrastructure systems to hackers. What is FreeRTOS Amazon, WHIS OpenRTOS...