The issue involves insufficient verification of the origin of IPv6 Router Advertisement frames within FreeRTOS-Plus-TCP prior to V4.4.2. As a result, a malicious actor sending crafted RA packets can alter how the system configures its IPv6 routing, including the default gateway, on-link prefix, and IP address allocation. This manipulation can redirect traffic, enable interception, or cause the device to operate on an unintended network. The weakness is classified as CWE‑940, reflecting improper management of upstream network configuration messages.

Vendor FreeRTOS offers its FreeRTOS-Plus-TCP component. The vulnerability is present in all releases before version 4.4.2, encompassing all platforms that compile the router advertisement handler. No specific OS or device is limited beyond the component; any embedded system running this library may be affected.

The CVSS base score of 9.2 describes a high‑severity exploit. Although EPSS data is unavailable, the absence of a KEV listing does not diminish the risk because the flaw can be triggered over a network interface. Attackers must be able to inject spoofed IPv6 RA frames towards a target device; no local privilege is required. The permissive acceptance of RA packets is the main exploitation path, suggesting that the vulnerability is primarily remote with network‑only reachability.