CVE-2018-8119

The CVE-2018-8119 entry describes a spoofing vulnerability in the Azure IoT Device Provisioning AMQP Transport library, where certificate validation over AMQP is improper. Affected are the Azure IoT C#, C, and Java SDKs (Device Provisioning AMQP Transport) and the vulnerability enables impersonat...

CVE-2018-8531

Azure IoT Hub Device Client SDK (MQTT) has a remote code execution vulnerability due to memory access/corruption in the SDK, affecting the Hub Device Client SDK and Azure IoT Edge. The underlying issue is memory corruption in how in-memory objects are accessed, enabling arbitrary code execution u...