Freertos FreeRTOS-Plus-TCP vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Freertos FreeRTOS-Plus-TCP: 2 record(s), with affected versions and fixes.
CVE-2026-102552
Medium · 5.9
CWE-940 Oct 16, 2026
Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver
Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply.
To remediate this issue, users should upgrade to version V4.4.2 and enable ipconfigDNS_CHECK_REPLY_SOURCE_IP.
CVE-2026-102551
High · 7.7
CWE-940 Oct 16, 2026
Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling
Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router Advertisement.
To remediate this issue, users should upgrade to version V4.4.2.