iot platform vulnerabilities and fixes

Recent CVEs affecting iot platform, with upgrade or downgrade steps. 3 tracked.

Also searched as: iotplatform.

iot platform has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-10-13. Highest priority: CVE-2022-35135 (score 51/100).

• CVE-2022-35136 MEDIUM 6.5 DOWNGRADE Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests.
• CVE-2022-35135 HIGH 8.8 DOWNGRADE Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/use
• CVE-2022-35134 MEDIUM 5.4 DOWNGRADE Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability.

FAQ

How do I fix iot platform vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is iot platform being exploited right now?

None of the tracked iot platform CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which iot platform CVE should I patch first?

CVE-2022-35135 currently ranks highest (51/100): Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/use.

RSS feed for iot platform · ← Back to latest CVEs