CVEvulnerability
CVE-2018-8531
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-10-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge.
Affected configurations
• microsoft azure internet of things edge
• microsoft csharp software development kit
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- http://www.securityfocus.com/bid/105472 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8531 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/105472 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8531 Patch, Vendor Advisory