CVE-2023-48693 Azure RTOS ThreadX Remote Code Execution Vulnerability
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2023-48693?
CVE-2023-48693 is a high-severity vulnerability in azure-rtos threadx, published on 5 Dec 2023.
Official description
Azure RTOS ThreadX is an advanced real-time operating system (RTOS) designed specifically for deeply embedded applications. An attacker can cause arbitrary read and write due to vulnerability in parameter checking mechanism in Azure RTOS ThreadX, which may lead to privilege escalation. The affected components include RTOS ThreadX v6.2.1 and below. The fixes have been included in ThreadX release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Weakness: CWE-20
Which versions are affected by CVE-2023-48693?
It affects 1 product.
Products include Microsoft Azure Rtos Threadx.
How do I fix CVE-2023-48693?
No fix has been published for CVE-2023-48693 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-48693 being exploited?
There is no known exploitation of CVE-2023-48693 in the wild and no public exploit code.
Sources
Also known as GHSA-p7w6-62rq-vrf9.