Information disclosure

Azure Sphere Information Disclosure Vulnerability...

Information disclosure

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-41375

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-41376

Azure Sphere Information Disclosure Vulnerability...

Information disclosure

Azure Sphere Information Disclosure Vulnerability...

CVE-2021-41374

Azure Sphere Information Disclosure Vulnerability...

Cisco Talos finds 10 vulnerabilities in Azure Sphere’s Linux kernel, Security Monitor and Pluton

By Claudio Bozzato and Lilith --;. Following our previous engagements see blog posts 1, 2, 3 and 4 with Microsoft's Azure Sphere IoT platform, we decided to take another look at the device, without all the rush and commotion that normally entails a hacking challenge. Today, we’re... This is only...

CVE-2021-42300

CVE-2021-42300 corresponds to Microsoft Azure Sphere Tampering Vulnerability. Connected sources indicate Azure Sphere (and related Azure RTOS/FSLogix entries) are affected by a tampering issue arising from insufficient access control, enabling local attacker access. The CVSS:3.1 vector (AV:L/AC:L...

CVE-2021-42300 Azure Sphere Tampering Vulnerability

...

CVE-2021-41376

CVE-2021-41376 is an Azure Sphere Information Disclosure vulnerability. Connected sources confirm Azure Sphere as the affected product with potential access to sensitive information, categorized as information disclosure with local access requirements. Microsoft and North‑Western advisories indic...

CVE-2021-41376 Azure Sphere Information Disclosure Vulnerability

...

CVE-2021-41375

Azure Sphere Information Disclosure Vulnerability (CVE-2021-41375) affects Microsoft Azure Sphere OS. Connected sources corroborate an information-disclosure issue with Azure Sphere, CVSS around 4.4 (MEDIUM) and remote vector listed as LOCAL with high privileges required in some vectors; official...

CVE-2021-41375 Azure Sphere Information Disclosure Vulnerability

...

CVE-2021-41374 Azure Sphere Information Disclosure Vulnerability

...

CVE-2021-41374 Azure Sphere Information Disclosure Vulnerability

...

CVE-2021-41374

CVE-2021-41374 concerns Microsoft Azure Sphere Information Disclosure Vulnerability. Connected documents affirm Azure Sphere as affected. CVSS data indicate an attacker with local access and low privileges could cause confidentiality impact (C: HIGH; I/N/A N) per CVSS v3.1, while CVSS v2.0/3.1 me...

Microsoft Azure Sphere Input Validation Error Vulnerability

Microsoft Azure Sphere is an appliance used by Microsoft USA to provide security in cloud environments. Microsoft Azure Sphere is vulnerable to an input validation error. No details of the vulnerability are currently available...

Microsoft Azure Sphere Data Forgery Issue Vulnerability

Microsoft Azure Sphere, a Microsoft appliance used to provide security in cloud environments, is vulnerable to a data forgery issue. The vulnerability stems from a network system or product that does not adequately verify the origin or authenticity of data. An attacker could use the falsified dat...

Microsoft Azure Sphere Buffer Overflow Vulnerability

Microsoft Azure Sphere is an appliance used to provide security in cloud environments by Microsoft Corporation USA. No detailed vulnerability details are available at this time...

Microsoft Azure Sphere Information Disclosure Vulnerability (CNVD-2021-93635)

Microsoft Azure Sphere is a security vulnerability in Microsoft Azure Sphere, an appliance used by Microsoft to provide security in cloud environments. No details of the vulnerability are currently available...