CVE-2022-35784 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-35784

CVE-2022-35784 is a Microsoft Azure Site Recovery elevation-of-privilege vulnerability affecting Azure Site Recovery (notably in VMware‑to‑Azure recovery). Connected sources describe it as a privilege-escalation issue (NCSC listing: Obtaining increased rights) with a CVSS 3.1 base score around 6....

CVE-2022-35783 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-35783

The connected documents confirm CVE-2022-35783 targets Microsoft Azure Site Recovery, specifically the VMware-to-Azure component. The root cause is insufficient access control, enabling a remote attacker to gain unauthorized access to protected information (information disclosure). Microsoft’s ad...

CVE-2022-35783 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-35782

CVE-2022-35782: Azure Site Recovery Elevation of Privilege vulnerability. Affected: Microsoft Azure Site Recovery (Azure Site Recovery, Open Management Infrastructure, VMware-to-Azure components are listed among affected products). Impact: Elevation of privileges (I HIGH), with base CVSSv3.1 scor...

CVE-2022-35782 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-35782 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-35781 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-35781

CVE-2022-35781 is listed across multiple feeds as an Elevation of Privilege vulnerability related to Microsoft Azure Site Recovery. Connected documents identify affected components (Azure Site Recovery/Open Management Infrastructure) and note privilege-escalation potential; a remediation path exi...

CVE-2022-35781 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-35780 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-35780 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-35780

CVE-2022-35780 corresponds to an Elevation of Privilege vulnerability in Microsoft Azure Site Recovery (ASR). CVSS 3.1/3.1: Network, Low attack complexity, Privileges Required: High, User Interaction: None, Impact: Privilege escalation and high impact on integrity and availability. Connected sour...

CVE-2022-35779 Azure RTOS GUIX Studio Remote Code Execution Vulnerability

...

CVE-2022-35779

Azure RTOS GUIX Studio has a Remote Code Execution vulnerability (CVE-2022-35779) caused by insufficient input validation in the GUIX Studio development environment. Affected product: Azure RTOS GUIX Studio. Root cause: input validation issues leading to code execution. Impact: arbitrary code exe...

CVE-2022-35779 Azure RTOS GUIX Studio Remote Code Execution Vulnerability

...

CVE-2022-35776 Azure Site Recovery Denial of Service Vulnerability

...

CVE-2022-35776 Azure Site Recovery Denial of Service Vulnerability

...

CVE-2022-35776

CVE-2022-35776 is a Denial of Service vulnerability in Microsoft Azure Site Recovery. The Nessus plugin notes the Azure Site Recovery installation on remote hosts is missing security updates and that CVE-2022-35776 contributes to a DoS impact. Affected product: Azure Site Recovery / Open Manageme...