cveboard RSS feed

CVE-2021-40828

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2021
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

TLS hostname validation issues within AWS IoT Device SDKs on Windows

Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior to 1.3.3), Python (versions prior to 1.5.18), C++ (versions prior to 1.12.7) and Node.js (versions prior to 1.5.1) did not verify server certificate hostname during TLS handshake when overriding Certificate Authorities (CA) in their trust stores on Windows. This issue has been addressed in aws-c-io submodule versions 0.9.13 onward. This issue affects: Amazon Web Services AWS IoT Device SDK v2 for Java versions prior to 1.3.3 on Microsoft Windows. Amazon Web Services AWS IoT Device SDK v2 for Python versions prior to 1.5.18 on Microsoft Windows. Amazon Web Services AWS IoT Device SDK v2 for C++ versions prior to 1.12.7 on Microsoft Windows. Amazon Web Services AWS IoT Device SDK v2 for Node.js versions prior to 1.5.3 on Microsoft Windows.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

AWS IoT Device SDK v2 for Java

Vendor
Amazon Web Services
Product
AWS IoT Device SDK v2 for Java
Platforms
  • Microsoft Windows
Default status
Unknown
AWS IoT Device SDK v2 for Java · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom1.3.3UnavailableNone listed

AWS IoT Device SDK v2 for Python

Vendor
Amazon Web Services
Product
AWS IoT Device SDK v2 for Python
Platforms
  • Microsoft Windows
Default status
Unknown
AWS IoT Device SDK v2 for Python · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom1.5.18UnavailableNone listed

AWS IoT Device SDK v2 for C++

Vendor
Amazon Web Services
Product
AWS IoT Device SDK v2 for C++
Platforms
  • Microsoft Windows
Default status
Unknown
AWS IoT Device SDK v2 for C++ · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom1.12.7UnavailableNone listed

AWS IoT Device SDK v2 for Node.js

Vendor
Amazon Web Services
Product
AWS IoT Device SDK v2 for Node.js
Platforms
  • Microsoft Windows
Default status
Unknown
AWS IoT Device SDK v2 for Node.js · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
unspecifiedaffectedcustom1.5.3UnavailableNone listed

AWS-C-IO

Vendor
Amazon Web Services
Product
AWS-C-IO
Platforms
  • Microsoft Windows
Default status
Unknown
AWS-C-IO · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0.9.12affectedUnavailableUnavailableUnavailableNone listed