Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVE-2023-36418

7.8HIGH

Key Information:

Vendor
Microsoft
Status
Azure Rtos Guix Studio
Vendor
CVE Published:
10 October 2023

Summary

A remote code execution vulnerability exists in Azure RTOS GUIX Studio, allowing attackers to execute arbitrary code on affected systems. The flaw arises from improper handling of inputs, enabling potential unauthorized control of vulnerable instances. Organizations using Azure RTOS GUIX Studio should prioritize applying the latest patches to safeguard their systems against exploitation. For further details, guidance, and updates, refer to the official advisory provided by Microsoft.

Affected Version(s)

Azure RTOS GUIX Studio Unknown 6.0.0.0 < 6.3.0

Azure RTOS GUIX Studio Unknown 6.0.0 < 6.3.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.