Lucene search

K
kasperskyKaspersky LabKLA12338
HistoryNov 09, 2021 - 12:00 a.m.

KLA12338 Multiple vulnerabilities in Microsoft Azure

2021-11-0900:00:00
Kaspersky Lab
threats.kaspersky.com
13

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

5.6 Medium

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

45.1%

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, spoof user interface.

Below is a complete list of vulnerabilities:

  1. An information disclosure vulnerability in Azure RTOS can be exploited remotely to obtain sensitive information.
  2. An elevation of privilege vulnerability in Azure RTOS can be exploited remotely to gain privileges.
  3. An information disclosure vulnerability in Azure Sphere can be exploited remotely to obtain sensitive information.
  4. A tampering vulnerability in Azure Sphere can be exploited remotely to spoof user interface.
  5. An information disclosure vulnerability in FSLogix can be exploited remotely to obtain sensitive information.

Original advisories

CVE-2021-42301

CVE-2021-42304

CVE-2021-26444

CVE-2021-41375

CVE-2021-41374

CVE-2021-42303

CVE-2021-42300

CVE-2021-42323

CVE-2021-41376

CVE-2021-42302

CVE-2021-41373

Related products

Microsoft-Azure

CVE list

CVE-2021-42301 unknown

CVE-2021-42304 unknown

CVE-2021-26444 unknown

CVE-2021-41375 unknown

CVE-2021-41374 unknown

CVE-2021-42303 unknown

CVE-2021-42300 unknown

CVE-2021-42323 unknown

CVE-2021-41376 unknown

CVE-2021-42302 unknown

CVE-2021-41373 unknown

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

  • OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

  • PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

  • SUI

Spoof user interface. Exploitation of vulnerabilities with this impact can lead to changes in user interface to beguile user into inaccurate behavior.

Affected Products

  • Azure SphereAzure RTOSFSLogix

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

5.6 Medium

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

45.1%