GCVE-110-CERTCC-2017-590639

Advisory PublishedCVSS 9.3/10

Vulnetix · Advisory published October 12, 2017

The NXP Semiconductors MQX RTOS prior to version 5.1 contains a buffer overflow in the DHCP client, which may lead to memory corruption allowing an attacker to execute arbitrary code, as well as an out of bounds read in the DNS client which may lead to a denial of service.

Download JSON Open in Console

Risk Scores

CVSS 2.0

9.3/10

Critical · AV:N/AC:M/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score7.3remediation_levelOFreport_confidenceCenvironmental_score5.48031772512target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND