937 matches found
CVE-2024-21323
Microsoft Defender for IoT Remote Code Execution Vulnerability...
CVE-2024-21324
Microsoft Defender for IoT Elevation of Privilege Vulnerability...
CVE-2024-21322
Microsoft Defender for IoT Remote Code Execution Vulnerability...
CVE-2024-29055 Microsoft Defender for IoT Elevation of Privilege Vulnerability
...
CVE-2024-29055
Summary (CVE-2024-29055 | Microsoft Defender for IoT) A known elevation of privilege vulnerability in Microsoft Defender for IoT. The root cause is described as inadequate access control that could allow a remote attacker to escalate privileges within the affected software. Several sources flag t...
CVE-2024-29054 Microsoft Defender for IoT Elevation of Privilege Vulnerability
...
CVE-2024-29055 Microsoft Defender for IoT Elevation of Privilege Vulnerability
...
CVE-2024-29053 Microsoft Defender for IoT Remote Code Execution Vulnerability
...
CVE-2024-29053 Microsoft Defender for IoT Remote Code Execution Vulnerability
...
CVE-2024-21324 Microsoft Defender for IoT Elevation of Privilege Vulnerability
...
CVE-2024-21324
CVE-2024-21324 – Microsoft Defender for IoT Elevation of Privilege is a Defender for IoT vulnerability. Current sources indicate a privilege-escalation flaw within Defender for IoT that could allow a malicious actor to gain higher permissions in the process, with CVSSv3 base score 7.2 (AV:N/AC:L/...
CVE-2024-21323
CVE-2024-21323 is a Defender for IoT remote code execution vulnerability. The connected sources describe a path-traversal flaw in the sensor update process: an attacker who can authenticate to the Defender for IoT web application and control how the sensor receives updates could push a malicious ...
CVE-2024-21324 Microsoft Defender for IoT Elevation of Privilege Vulnerability
...
CVE-2024-21322 Microsoft Defender for IoT Remote Code Execution Vulnerability
...
CVE-2024-21322
CVE-2024-21322 affects Microsoft Defender for IoT. Affected component is the Defender for IoT web application; the root cause is described by Microsoft as CWE-77 (improper neutralization of commands). Exploitation yields remote code execution and requires the attacker to have existing administrat...
Microsoft Defender for IoT Elevation of Privilege Vulnerability
...
Microsoft Defender for IoT Remote Code Execution Vulnerability
...
Microsoft Defender 安全漏洞
Microsoft Defender for IoT is an asset discovery, vulnerability management and threat monitoring solution for IoT/OT environments. Microsoft Defender for IoT suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code on a system...
PT-2024-2790
Name of the Vulnerable Software and Affected Versions Microsoft Defender for IoT affected versions not specified Description The issue is related to the failure to neutralize special elements used in an operating system command. This can allow a remote attacker to execute arbitrary code...
PT-2024-2831 · Microsoft · Defender For Iot
Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to insufficient access control in Microsoft Defender for IoT, which could allow a remote attacker to elevate their privileges. Recommendations: At th...