NXP Semiconductors MQX RTOS (Update A)
Advisory ansehen veröffentlicht 2017-10-12
ATTENTION: Remotely exploitable/low skill level to exploit.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-12722US | medium5.3 | — | ||
An Out-of-bounds Read issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump read… | ||||
| CVE-2017-12718US | high8.1 | Exploit | ||
A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-17-285-04A JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationMQX RTOS
NXP released MQX, Version 5.1 on January 31, 2018, which addresses both vulnerabilities.
- MitigationMQX RTOS
NXP released MQX, Version 5.1 on January 31, 2018, which addresses both vulnerabilities.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan