175 matches found
CVE-2025-1242
CVE-2025-1242: Exposure of Administrative IoT Hub Credentials Advisory Field| Value ---|--- CVE| CVE-2025-1242 ICSA| ICSA-26-055-03 CVSS 3.1| 9.1 Critical Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-798 Use of Hard-coded Credentials Researcher| Michael Groberman — Gr0m Published...
CVE-2026-13768
CVE-2026-13768 - Gardyn IoT Hub 所有者密钥暴露 !WARNING 此仓库包含一个高严重性物联网漏洞的完整概念验证。 本代码仅供教育用途、授权安全研究和防御性测试使用 。 未经授权使用是违法的。 未经所有者明确书面许可，测试或利用系统违反了《计算机欺诈与滥用法》（CFAA）、欧盟《网络弹性法案》以及您所在司法管辖区的其他适用法律。 作者对因本代码导致的任何误用、损害或法律后果不承担任何责任 。 始终在法律和道德范围内进行操作。 概述 CVE-2026-13768 暴露了 Gardyn 智能花园系统中 IoT Hub 的所有者级连接字符串，允许对 Azure...
The vulnerability of the Azure IoT Central data management platform, related to information disclosure, allows attackers to enhance their privileges.
The vulnerability of the Azure IoT Central data management platform is related to the exposure of information. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...
CVE-2026-21515 Azure IoT Central Elevation of Privilege Vulnerability
...
CVE-2026-21515
Technical details of CVE-2026-21515 are not publicly available in the provided documents. Monitor for updates from MSRC/NVD; no specifics on affected components, root cause, or fixes are included.
CVE-2026-21515: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network...
Microsoft Azure IOT Central 信息泄露漏洞
Microsoft Azure IoT Central is an IoT application platform provided by Microsoft Corporation, which offers capabilities for device connection, management, and data analysis. There is a vulnerability in Microsoft Azure IoT Central, where sensitive information has been leaked to unauthorized actors...
Exploit for CVE-2025-1242
CERT/CC VU653116 | CISA Advisory ICSA-26-055-03https:/...
CVE-2026-23664
Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-23662
Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-23661
Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-26121
Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...
The vulnerability of the Azure IoT Explorer software, related to insufficient validation of input data, allows attackers to perform spoofing attacks.
The vulnerability of the Azure IoT Explorer software is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to carry out spoofing attacks remotely...
The vulnerability of the Azure IoT Explorer software, related to the transmission of critical information in plaintext, allows a perpetrator to disclose protected information.
The vulnerability of the Azure IoT Explorer software is related to the transmission of critical information in open text format. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
EUVD-2026-10690
Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-26121
Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-26121
Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-23664
Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...