Azure IoT SDK Remote Code Execution Vulnerability
CVE-2024-38157
7HIGH
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 13 August 2024
What is CVE-2024-38157?
The vulnerability identified in the Azure IoT SDK allows for potential remote code execution, posing a significant risk to any applications utilizing this framework within IoT environments. This flaw could be exploited by attackers to gain unauthorized access and control over affected systems, resulting in potential data breaches and system compromises. Developers and organizations using Microsoft Azure IoT SDK are advised to review their implementations and apply necessary patches to mitigate this vulnerability effectively.
Affected Version(s)
Azure IoT Hub Device Client SDK Unknown 1.0.0 < 1.12.1