CVE-2026-102552

MediumCVSS 5.9

Published: 16/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 17/10/2026(UTC)NVD NIST

Summary

The DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 improperly verifies the source of DNS replies. A remote attacker can insert a chosen address into the device's DNS cache via a forged DNS reply.

Risk Assessment

An attacker can redirect device traffic to malicious IP addresses, enabling data interception or man-in-the-middle attacks. This affects all IoT devices running FreeRTOS-Plus-TCP below V4.4.2.

Recommendation

Upgrade the library to V4.4.2 or later and enable the ipconfigDNS_CHECK_REPLY_SOURCE_IP option in the configuration.

Other vulnerabilities in Amazon FreeRTOS-Plus-TCP

CVE-2026-102551High
Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router Advertisement.

Original NVD description (English source)

Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply. To remediate this issue, users should upgrade to version V4.4.2 and enable ipconfigDNS_CHECK_REPLY_SOURCE_IP.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS