Amazon Web Services Freertos
Vendor:
First CVE: Dec 6, 2018 · Active for 7 years
14
Total CVEs
More Total CVEs than 91% of tracked products
7.0
Avg CVEs / Year
Higher CVE frequency than 92% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 40% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Amazon Web Services Freertos over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 6, 2018
7 years ago
Most Recent CVE
Oct 7, 2019
2,482 days ago
CVE Severity & Scoring
Amazon Web Services Freertos14 CVEs
50%
50%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network14 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (7.1%)
High13 (92.9%)
Unknown0 (0.0%)
User Interaction
None14 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None14 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-16601HIGH An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. A | Dec 6, 2018 | 8.1 | 27 | NO | NO |
CVE-2018-16526HIGH Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to lea | Dec 6, 2018 | 8.1 | 27 | NO | NO |
CVE-2018-16525HIGH Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to exe | Dec 6, 2018 | 8.1 | 27 | NO | NO |
CVE-2018-16528HIGH Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corruption in prvSetupConnection and GGD_Secure | Dec 6, 2018 | 8.1 | 26 | NO | NO |
CVE-2018-16522HIGH Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETS_SetSockOpt. | Dec 6, 2018 | 8.1 | 26 | NO | NO |
CVE-2018-16523HIGH Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow division by zero in prv | Dec 6, 2018 | 7.4 | 24 | NO | NO |
CVE-2019-13120HIGH Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents on a device to an atta | Oct 7, 2019 | 7.5 | 23 | NO | NO |
CVE-2018-16602MEDIUM An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. O | Dec 6, 2018 | 5.9 | 22 | NO | NO |
CVE-2018-16599MEDIUM An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. O | Dec 6, 2018 | 5.9 | 22 | NO | NO |
CVE-2018-16603MEDIUM An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. O | Dec 6, 2018 | 5.9 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (14 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (14 CVEs).
Media Mentions
Signals from CVEs in this product scope (14 CVEs).
Top CNAs Publishing CVEs For Amazon Web Services Freertos
Top CWEs
Versions
No cataloged versions.