Lucene search

K
cvelistMicrosoftCVELIST:CVE-2020-16987
HistoryNov 11, 2020 - 6:47 a.m.

CVE-2020-16987 Azure Sphere Unsigned Code Execution Vulnerability

2020-11-1106:47:54
microsoft
www.cve.org
2
azure sphere
unsigned code execution
vulnerability

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:U/RL:O/RC:C

AI Score

7.4

Confidence

High

EPSS

0.004

Percentile

73.7%

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "Azure Sphere",
    "cpes": [
      "cpe:2.3:a:microsoft:azure_sphere:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "20.00",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:U/RL:O/RC:C

AI Score

7.4

Confidence

High

EPSS

0.004

Percentile

73.7%

Related for CVELIST:CVE-2020-16987