Log in Start free

edgexfoundry

Products

ProductCVEsExploitedLatest
edgex-go2–Jun 14, 2022
app-functions-sdk-go1–Nov 18, 2021

Exploited and recent CVEs

  • CVE-2022-31066 Medium 5.9 Configuration API in EdgeXFoundry exposes message bus credentials to local unauthenticated users 0.3%
  • CVE-2021-41278 Medium 5.4 Broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via unspecified vectors 0.4%
  • CVE-2021-32753 High 8.3 Weak password in API gateway in EdgeX Foundry Edinburgh, Fuji, Geneva, and Hanoi releases allows remote attackers to obtain authentication token via dictionary-based password attack when OAuth2 authentication method is enabled. 0.8%