CVE-2018-8531 A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerab...
HighCVSS 8.8
EPSS 15.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft azure internet of things edge | All versions | No fix listed |
| Microsoft csharp software development kit | All versions | No fix listed |
| Microsoft Hub Device Client SDK | = Azure IoT | No fix listed |
| Microsoft Azure IoT Edge | = Azure IoT Edge | No fix listed |
References
- 105472 third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory