Vulnerabilidades do Freertos FreeRTOS-Plus-TCP
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Freertos FreeRTOS-Plus-TCP: 2 registro(s), com versões afetadas e correções.
CVE-2026-102552
Média · 5.9
CWE-940 16/10/2026
Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver
Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply.
To remediate this issue, users should upgrade to version V4.4.2 and enable ipconfigDNS_CHECK_REPLY_SOURCE_IP.
CVE-2026-102551
Alta · 7.7
CWE-940 16/10/2026
Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling
Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router Advertisement.
To remediate this issue, users should upgrade to version V4.4.2.