High severity8.1NVD Advisory· Published Dec 5, 2023· Updated Jun 17, 2026

CVE-2023-48691

Description

Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds write in Azure RTOS NETX Duo, that could lead to remote code execution. The affected components include process related to IGMP protocol in RTOS v6.2.1 and below. The fix has been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Azure/Netxduov52 versions
< 6.3.0+ 1 more
- (no CPE)range: < 6.3.0
- (no CPE)range: <=6.2.1
Microsoft/Azure Rtos Netx Duo
cpe:2.3:o:microsoft:azure_rtos_netx_duo:*:*:*:*:*:*:*:*
Range: <6.3.0

Patches

Vulnerability mechanics

References

github.com/azure-rtos/netxduo/security/advisories/GHSA-fwmg-rj6g-w99pnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000