Vulnerabilities fixed in Microsoft Azure products

🗓️ 09 Nov 2021 00:00:00Reported by NCSCType

Microsoft fixed vulnerabilities in Azure products that could grant elevated privileges or expose sensitive data.

Reporter	Title	Published	Views	Family All 131
BDU FSTEC	The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.	3 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure RTOS operating system, which arises due to insufficient validation of input data, allows attackers to escalate their privileges.	3 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.	7 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure RTOS, related to deficiencies in the system’s controlled area segmentation, allows a intruder to gain unauthorized access to the device.	7 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure RTOS, related to deficiencies in the system’s controlled area segmentation, allows a intruder to gain unauthorized access to the device.	7 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Sphere operating system, related to deficiencies in access control, allows attackers to escalate their privileges.	7 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Azure RTOS operating systems, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.	7 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure RTOS operating system, which arises due to insufficient validation of input data, allows attackers to escalate their privileges.	9 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure RTOS operating system, which arises due to insufficient validation of input data, allows attackers to escalate their privileges.	9 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the FSLogix automated control software lies in the lack of protection for service data, allowing a malicious individual to gain unauthorized access to the device.	17 Dec 202100:00	–	bdu_fstec

09 Nov 2021 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 27.2

CVSS 3.16.7 - 6.8

EPSS0.01134

SSVC