Vulnerability Spotlight: Authentication bypass, use-after-free vulnerabilities found in a library for the µC/OS open-source operating system
Cisco Talos discovered two vulnerabilities in the FTP server of µC/OS, an embedded operating system developed by Micrium that supports TCP/IP, USB, CAN bus and Modbus. TALOS-2022-1680 (CVE-2022-41985) can bypass authentication or cause a denial-of-service...