high7.7
CVE-2026-102551
Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a…
Impact
Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router Advertisement. To remediate this issue, users should upgrade to version V4.4.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amazon | Amazon FreeRTOS-Plus-TCP | before 4.4.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.