KLA12338 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, spoof user interface.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Azure RTOS can be exploited remotely to obtain sensitive information.
2. An elevation of privilege vulnerability in Azure RTOS can be exploited remotely to gain privileges.
3. An information disclosure vulnerability in Azure Sphere can be exploited remotely to obtain sensitive information.
4. A tampering vulnerability in Azure Sphere can be exploited remotely to spoof user interface.
5. An information disclosure vulnerability in FSLogix can be exploited remotely to obtain sensitive information.

Original advisories

CVE-2021-42301

CVE-2021-42304

CVE-2021-26444

CVE-2021-41375

CVE-2021-41374

CVE-2021-42303

CVE-2021-42300

CVE-2021-42323

CVE-2021-41376

CVE-2021-42302

CVE-2021-41373

Related products

Microsoft-Azure

CVE list

CVE-2021-42301 unknown

CVE-2021-42304 unknown

CVE-2021-26444 unknown

CVE-2021-41375 unknown

CVE-2021-41374 unknown

CVE-2021-42303 unknown

CVE-2021-42300 unknown

CVE-2021-42323 unknown

CVE-2021-41376 unknown

CVE-2021-42302 unknown

CVE-2021-41373 unknown

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

• SUI

Spoof user interface. Exploitation of vulnerabilities with this impact can lead to changes in user interface to beguile user into inaccurate behavior.

Affected Products

• Azure SphereAzure RTOSFSLogix