What’s Vulnerable › Products

edgexfoundry edgex-go vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your edgexfoundry edgex-go version is affected

Latest edgexfoundry edgex-go vulnerabilities

• CVE-2022-31066 — Configuration API in EdgeXFoundry exposes message bus credentials to local unauthenticated users (CVSS 4.4)
• CVE-2021-41278 — Broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via unspecified vectors (CVSS 5.7)
• CVE-2021-32753 — Weak password in API gateway in EdgeX Foundry Edinburgh, Fuji, Geneva, and Hanoi releases allows remote attackers to obtain authentication token via dictionary-based password attack when OAuth2 authentication method is enabled. (CVSS 6.5)