NXP Semiconductors MQX RTOS (Update A)
view advisory published 2017-10-12
ATTENTION: Remotely exploitable/low skill level to exploit.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-12722US | medium5.3 | — | ||
An Out-of-bounds Read issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump read… | ||||
| CVE-2017-12718US | high8.1 | Exploit | ||
A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-17-285-04A JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationMQX RTOS
NXP released MQX, Version 5.1 on January 31, 2018, which addresses both vulnerabilities.
- MitigationMQX RTOS
NXP released MQX, Version 5.1 on January 31, 2018, which addresses both vulnerabilities.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan