CVE-2022-35779
published 2022-08-09CVE-2022-35779: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
PriorityP339high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.83%
53.4th percentile
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | azure_rtos_guix_studio | >= 6.0.0.0 < 6.1.12.0 | 6.1.12.0 |
| msrc | azure_rtos_guix_studio | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
vendor_msrc7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rrxw-6cxg-833x: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
ghsa_unreviewed·2022-08-10·CVSS 7.8
CVE-2022-35806 [HIGH] GHSA-rrxw-6cxg-833x: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30175, CVE-2022-30176, CVE-2022-34687, CVE-2022-35773, CVE-2022-35779.
GHSA
GHSA-5pxc-6jqh-5cc3: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
ghsa_unreviewed·2022-08-10·CVSS 7.8
CVE-2022-34687 [HIGH] GHSA-5pxc-6jqh-5cc3: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30175, CVE-2022-30176, CVE-2022-35773, CVE-2022-35779, CVE-2022-35806.
GHSA
GHSA-q7qr-35m9-5m25: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
ghsa_unreviewed·2022-08-10·CVSS 7.8
CVE-2022-35773 [HIGH] CWE-20 GHSA-q7qr-35m9-5m25: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30175, CVE-2022-30176, CVE-2022-34687, CVE-2022-35779, CVE-2022-35806.
GHSA
GHSA-c282-pfmx-h4c9: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
ghsa_unreviewed·2022-08-10·CVSS 7.8
CVE-2022-30175 [HIGH] CWE-94 GHSA-c282-pfmx-h4c9: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30176, CVE-2022-34687, CVE-2022-35773, CVE-2022-35779, CVE-2022-35806.
GHSA
GHSA-j8cq-7xf6-6jxc: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
ghsa_unreviewed·2022-08-10·CVSS 7.8
CVE-2022-30176 [HIGH] CWE-787 GHSA-j8cq-7xf6-6jxc: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30175, CVE-2022-34687, CVE-2022-35773, CVE-2022-35779, CVE-2022-35806.
GHSA
GHSA-25r2-963f-gx8g: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
ghsa_unreviewed·2022-08-10·CVSS 7.8
CVE-2022-35779 [HIGH] CWE-94 GHSA-25r2-963f-gx8g: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
Azure RTOS GUIX Studio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30175, CVE-2022-30176, CVE-2022-34687, CVE-2022-35773, CVE-2022-35806.
Microsoft
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
vendor_msrc·2022-08-09·CVSS 7.8
CVE-2022-35779 [HIGH] Azure RTOS GUIX Studio Remote Code Execution Vulnerability
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
FAQ: What is RTOS?
Azure RTOS is an embedded development suite including a small but powerful operating system that provides reliable, ultra-fast performance for resource-constrained devices. See Azure RTOS Overview for more information.
What is Azure RTOS GUIX Studio?
Azure GUIX embedded GUI is Microsoft’s advanced, industrial grade GUI solution designed specifically for deeply embedded, real-time, and IoT applications. Microsoft also provides a full-featured WYSIWYG desktop design tool named Azure RTOS GUIX Studio, which allows developers to design their GUI on the desktop and generate Azure RTOS GUIX embedded GUI code that can then be exported to the target. See Azure RTOS GUIX and Azure RTOS GUIX Studio for more information.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-08-09
Published