CVE-2023-48316
Critical
Description
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to snmp, smtp, ftp and dtls in RTOS v6.2.1 and below. The fixes have been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Microsoft Azure Rtos Netx Duo
PublishedDec 5, 2023
First seenDec 5, 2023
Weakness typeCWE-787Out-of-bounds writeCWE-825CWE-825
How to fix
Update
- microsoft azure_rtos_netx_duo6.3.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft azure_rtos_netx_duo | v < 6.3.0 | 6.3.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.