Amazon Web Services Internet OF Things Device Software Development Kit V2 vulnerabilities

Product

Amazon Web Services Internet OF Things Device Software Development Kit V2

by Amazon · last CVE Nov 23, 2021

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 4Medium 0Low 0

Severity

Exploitation

Watch

Add Amazon Web Services Internet OF Things Device Software Development Kit V2 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-40830	8.8	0%	Nov 23	The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority (CA) to the root CAs instead of overriding it on Unix systems Affected: before 1.5.0; before 1.5.3; before 1.6.1; before 1.12.7
CVE-2021-40829	8.8	0%	Nov 23	Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior to 1.4.2), Python (versions prior to 1.6.1), C++ (versions prior to 1.12.7) and Node.js (versions… Affected: before 1.4.2; before 1.5.3; before 1.6.1; before 1.12.7
CVE-2021-40828	8.8	0%	Nov 23	Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior to 1.3.3), Python (versions prior to 1.5.18), C++ (versions prior to 1.12.7) and Node.js (versions… Affected: before 1.3.3; before 1.5.1; before 1.5.18; before 1.12.7
CVE-2021-40831	7.2	1%	Nov 23	The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certificate Authority (CA) to the root CAs instead of overriding it on macOS systems Affected: before 1.5.0; before 1.6.0; before 1.7.0; before 1.14.0