Kaspersky LabKLA12561KLA12561 Multiple vulnerabilities in Microsoft Azure
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
61.4%
Detect date:
06/14/2022
Severity:
High
Description:
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code.
Affected products:
Azure Real Time Operating System
Azure Real Time Operating System GUIX
Container Monitoring Solution
Azure Security Center
Azure Service Fabric
Azure Stack Hub
Azure Open Management Infrastructure
Azure Sentinel
Azure Automation State Configuration, DSC Extension
Log Analytics Agent
Azure Diagnostics (LAD)
Azure Automation Update Management
Solution:
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories:
CVE-2022-30137
CVE-2022-30180
CVE-2022-30177
CVE-2022-30179
CVE-2022-29149
CVE-2022-30178
Impacts:
ACE
Related products:
Microsoft official advisories:
References
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29149
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30137
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30177
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30178
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30179
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30180
portal.msrc.microsoft.com/en-us/security-guidance
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Microsoft-Azure/
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
61.4%