154 matches found
CVE-2025-1242
CVE-2025-1242：管理级IoT Hub凭据暴露 通报 字段| 值 ---|--- CVE| CVE-2025-1242 ICSA| ICSA-26-055-03 CVSS 3.1| 9.1（严重） 向量| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-798（使用硬编码凭据） 研究人员| Michael Groberman — Gr0m 发布日期| 2026-02-24 产品 字段| 值 ---|--- 供应商| Gardyn 产品| Gardyn Home Kit 1.0、2.0、3.0、4.0；Gardyn...
CVE-2026-13768
CVE-2026-13768 - Gardyn IoT Hub 所有者密钥暴露 !WARNING 此仓库包含一个高严重性物联网漏洞的完整概念验证。 本代码仅供教育用途、授权安全研究和防御性测试使用 。 未经授权使用是违法的。 未经所有者明确书面许可，测试或利用系统违反了《计算机欺诈与滥用法》（CFAA）、欧盟《网络弹性法案》以及您所在司法管辖区的其他适用法律。 作者对因本代码导致的任何误用、损害或法律后果不承担任何责任 。 始终在法律和道德范围内进行操作。 概述 CVE-2026-13768 暴露了 Gardyn 智能花园系统中 IoT Hub 的所有者级连接字符串，允许对 Azure...
CVE-2026-21515 Azure IoT Central Elevation of Privilege Vulnerability
...
CVE-2026-21515
Technical details of CVE-2026-21515 are not publicly available in the provided documents. Monitor for updates from MSRC/NVD; no specifics on affected components, root cause, or fixes are included.
Microsoft Azure IOT Central 信息泄露漏洞
Microsoft Azure IoT Central is an IoT application platform provided by Microsoft Corporation, which offers capabilities for device connection, management, and data analysis. There is a vulnerability in Microsoft Azure IoT Central, where sensitive information has been leaked to unauthorized actors...
Exploit for CVE-2025-1242
CERT/CC VU653116 | CISA Advisory ICSA-26-055-03https:/...
CVE-2026-23664
Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-23662
Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-23661
Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-26121
Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-10690
Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-26121
Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-26121
Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-23664
Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-23661
Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-23662
Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-23664
Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-23661
Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-23662
Azure IoT Explorer contains an information disclosure vulnerability CVE-2026-23662. The CVSSv3.1 base score is 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, no privileges required, and no user interaction. The impact is Confidentiality: High; Integrity/Availability: None. Exploit ...
