AnsweredAssumed Answered

Is FreeRTOS or other IoT supported at all for Vuln Scanning?

Question asked by John S on Oct 24, 2018

Is there a list of the Operating Systems that the Qualys Vulnerability Scanner supports "finding" as well as hardware (like switches/routers/etc...)

The proliferation of IoT gets me wondering if they are "found".

 

I also ask because of the recent CVEs released for FreeRTOS.  If it was present on a network...would Qualys see it.

 

CVE-2018-16522

Remote Code Execution

CVE-2018-16525

Remote Code Execution

CVE-2018-16526

Remote Code Eexecution

CVE-2018-16528

Remote Code Execution

CVE-2018-16523

Denial of Service

CVE-2018-16524

Information Leak

CVE-2018-16527  

Information Leak

CVE-2018-16599

Information Leak

CVE-2018-16600

Information Leak

CVE-2018-16601

Information Leak

CVE-2018-16602

Information Leak

CVE-2018-16603

Information Leak

CVE-2018-16598

Other

 

https://www.bleepingcomputer.com/news/security/remote-code-execution-flaws-found-in-freertos-popular-os-for-embedded-systems/

https://www.freertos.org/

Outcomes