CVE-2023-48693 HIGH

CVE-2023-48693: Azure RTOS ThreadX Remote Code Execution Vulnerability

Vendor Azure-Rtos
Product threadx
Weakness CWE-20 · Input validation
Published December 5, 2023
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

What the vulnerability does

01Description

Azure RTOS ThreadX is an advanced real-time operating system (RTOS) designed specifically for deeply embedded applications. An attacker can cause arbitrary read and write due to vulnerability in parameter checking mechanism in Azure RTOS ThreadX, which may lead to privilege escalation. The affected components include RTOS ThreadX v6.2.1 and below. The fixes have been included in ThreadX release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Key dates

02Disclosure timeline

December 5, 2023 CVE published
August 2, 2024 Record updated