CVE-2023-48693

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Dec 5, 2023
Updated: Dec 8, 2023
CWE ID 20

Summary

CVE-2023-48693 is a vulnerability affecting Azure RTOS ThreadX, a real-time operating system used in deeply embedded applications. An attacker can exploit a flaw in the parameter checking mechanism, leading to arbitrary read and write access and potentially privilege escalation. This issue impacts ThreadX versions 6.2.1 and below. To mitigate the risk, users must upgrade to ThreadX release 6.3.0. No known workarounds are available.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share