KLA12338 Multiple vulnerabilities in Microsoft Azure

🗓️ 09 Nov 2021 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 41 Views

Multiple vulnerabilities in Microsoft Azure, including Azure RTOS, Azure Sphere, and FSLogix, allow malicious users to obtain sensitive info, gain privileges, and spoof user interface

Reporter	Title	Published	Views	Family All 131
BDU FSTEC	The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.	3 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure RTOS operating system, which arises due to insufficient validation of input data, allows attackers to escalate their privileges.	3 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.	7 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure RTOS, related to deficiencies in the system’s controlled area segmentation, allows a intruder to gain unauthorized access to the device.	7 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure RTOS, related to deficiencies in the system’s controlled area segmentation, allows a intruder to gain unauthorized access to the device.	7 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Sphere operating system, related to deficiencies in access control, allows attackers to escalate their privileges.	7 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Azure RTOS operating systems, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.	7 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure RTOS operating system, which arises due to insufficient validation of input data, allows attackers to escalate their privileges.	9 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure RTOS operating system, which arises due to insufficient validation of input data, allows attackers to escalate their privileges.	9 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the FSLogix automated control software lies in the lack of protection for service data, allowing a malicious individual to gain unauthorized access to the device.	17 Dec 202100:00	–	bdu_fstec

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-42301
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-42304
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-26444
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-41375
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-41374
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-42303
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-42300
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-42323
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-41376
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-42302

31 Mar 2025 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 27.2

CVSS 3.16.7 - 6.8

EPSS0.01211

SSVC