CVE-2026-102552

Published: Ott 16, 2026 Last Modified: Ott 19, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,2
Source: ff89ba41-3aa1-4d27-914a-91399e9639e5
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM 5,9
Source: ff89ba41-3aa1-4d27-914a-91399e9639e5
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: high
Availability: none

Description

AI Translation Available

Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply.

To remediate this issue, users should upgrade to version V4.4.2 and enable ipconfigDNS_CHECK_REPLY_SOURCE_IP.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0023
Percentile
0,1th
Updated

EPSS Score Trend (Last 3 Days)

940

Improper Verification of Source of a Communication Channel

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control Other
Potential Impacts:
Gain Privileges Or Assume Identity Varies By Context Bypass Protection Mechanism
Applicable Platforms
Technologies: Mobile
View CWE Details
https://aws.amazon.com/security/security-bulletins/2026-139…
https://aws.amazon.com/security/security-bulletins/2026-139-aws/
https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/…
https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.4.2
https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advi…
https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-h4fw-pv8…