CVE-2026-102551: Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling
Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router Advertisement.
To remediate this issue, users should upgrade to version V4.4.2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Amazon FreeRTOS-Plus-TCPto a version that resolves this vulnerability.Fixed in V4.4.2
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Endpoints using the IPv6 Router Advertisement handler in FreeRTOS-Plus-TCP versions before V4.4.2 are affected.
What does an attacker need to exploit it?
An unauthenticated remote third party must be able to send a crafted IPv6 Router Advertisement to the endpoint. Exploitation has high attack complexity and requires no user interaction or privileges.
What can an attacker change through a successful attack?
A crafted Router Advertisement can influence the endpoint's IPv6 default gateway, on-link prefix, and address configuration.
What is the recommended remediation?
Upgrade FreeRTOS-Plus-TCP to V4.4.2.