CVE-2024-28115
High
Description
FreeRTOS is a real-time operating system for microcontrollers. FreeRTOS Kernel versions through 10.6.1 do not sufficiently protect against local privilege escalation via Return Oriented Programming techniques should a vulnerability exist that allows code injection and execution. These issues affect ARMv7-M MPU ports, and ARMv8-M ports with Memory Protected Unit (MPU) support enabled (i.e. `configENABLE_MPU` set to 1). These issues are fixed in version 10.6.2 with a new MPU wrapper.
SeverityHigh
CVSS8.8
Exploit probability—
ProductAmazon Freertos
PublishedMar 7, 2024
First seenMar 7, 2024
Weakness typeCWE-284Improper access control
How to fix
Update
- amazon freertos10.6.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amazon freertos | v < 10.6.2 | 10.6.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.