Vulnerabilities fixed in Microsoft Defender for IoT

🗓️ 10 Apr 2024 00:00:00Reported by NCSCType

Vulnerabilities fixed in Defender for Internet of Things; attackers could gain elevated permissions and execute code; install updates.

Reporter	Title	Published	Views	Family All 68
BDU FSTEC	The vulnerability of the Microsoft Defender for IoT’s threat detection mechanism lies in the lack of measures to neutralize special elements used in the operating system’s command set, allowing attackers to execute arbitrary code.	16 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the threat detection mechanism for Microsoft Defender for IoT involves an incorrect path name limitation, allowing attackers to execute arbitrary code.	17 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the threat detection mechanism for Microsoft Defender for IoT, related to access control deficiencies, allows attackers to escalate their privileges.	17 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the threat detection mechanism for Microsoft Defender for IoT, related to access control deficiencies, allows attackers to enhance their privileges.	2 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the threat detection mechanism for Microsoft Defender for IoT, related to access control deficiencies, allows attackers to enhance their privileges.	2 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the threat detection mechanism for Microsoft Defender for IoT involves an incorrect restriction on the path name to the restricted catalog, allowing attackers to execute arbitrary code.	2 May 202400:00	–	bdu_fstec
CNNVD	Microsoft Defender 安全漏洞	9 Apr 202400:00	–	cnnvd
CNNVD	Microsoft Defender 安全漏洞	9 Apr 202400:00	–	cnnvd
CNNVD	Microsoft Defender 安全漏洞	9 Apr 202400:00	–	cnnvd
CNNVD	Microsoft Defender 安全漏洞	9 Apr 202400:00	–	cnnvd

10 Apr 2024 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 3.18.8

EPSS0.03199

SSVC