1078 matches found
Vulnerability Spotlight: Multiple remote code execution vulnerabilities in Microsoft Azure Sphere
Claudio Bozzato and Lilith of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos researchers recently discovered multiple vulnerabilities in Microsoft’s Azure Sphere, a cloud-connected and custom SoC platform designed specifically with IoT application security... This ...
CVE-2021-28460
Azure Sphere Unsigned Code Execution Vulnerability...
CVE-2021-28460
Azure Sphere Unsigned Code Execution Vulnerability...
Remote code execution
Azure Sphere Unsigned Code Execution Vulnerability...
CVE-2021-28460 Azure Sphere Unsigned Code Execution Vulnerability
...
CVE-2021-28460
Azure Sphere contains an unsigned code execution vulnerability (CVE-2021-28460). The issue is described as a local, low-complexity vulnerability that requires no authentication and can impact confidentiality, integrity, and availability. Several connected sources (NVD entry and Microsoft advisory...
GHSA-5FJJ-CFH2-GHC5 Server-Side Request Forgery and Inclusion of Functionality from Untrusted Control Sphere in jsreport
An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code...
Azure Sphere Unsigned Code Execution Vulnerability
...
Microsoft Azure Sphere 安全漏洞
Microsoft Azure Sphere is an appliance from Microsoft Corporation USA that is used to provide security in cloud environments. A security vulnerability exists in Microsoft Azure Sphere that originates from unsigned code execution...
Microsoft Azure Sphere mqueue inode initialization kernel code execution vulnerability
Summary A code execution vulnerability exists in the mqueue inode initialization functionality of Microsoft Azure Sphere 21.01. A specially crafted set of syscalls can lead to uninitialized kernel read, which in turn leads to code execution in kernel. To trigger this vulnerability, an attacker ca...
PT-2021-2728 · Microsoft · Azure Sphere
Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to incorrect code generation management in Azure Sphere operating systems. Exploitation of this issue may allow an attacker to execute arbitrary code...
Vulnerabilities fixed in Microsoft Azure products
Microsoft has fixed vulnerabilities in Azure products. The vulnerabilities allow an unauthenticated remote malicious person to remote user to execute arbitrary code and obtain elevated permissions. Open Source Software: |----------------|------|-------------------------------------| | CVE ID | CV...
Microsoft Azure Sphere Linux namespace ptrace unsigned code execution vulnerability
Summary An unsigned code execution vulnerability exists in the Linux namespace ptrace functionality of Microsoft Azure Sphere 21.01. Specially crafted shellcode could allow an adversary to execute unsigned code. An attacker can change the namespace and use ptrace to modify the code of a running...
Microsoft Azure Sphere mount namespace unsigned code execution vulnerability
Summary An unsigned code execution vulnerability exists in the mount namespace functionality of Microsoft Azure Sphere 21.01. A specially crafted shellcode could allow an adversary to execute an arbitrary binary in a tmpfs mount, leading to unsigned code execution. An attacker can switch to a new...
Microsoft Azure Sphere Kernel pwm_ioctl_apply_state kfree() code execution vulnerability
Summary A code execution vulnerability exists in the kernel pwmioctlapplystate functionality of Microsoft Azure Sphere 21.01. A specially crafted ioctl can lead to arbitrary kfree. An attacker can issue an ioctl to trigger this vulnerability. Tested Versions Microsoft Azure Sphere 21.01 Product...
Vulnerability of Azure Sphere operating systems, related to improper code generation management, allows attackers to execute arbitrary code.
The vulnerability of Azure Sphere operating systems is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Azure Sphere operating system, related to improper code generation management, allows a hacker to execute arbitrary code.
The vulnerability of the Azure Sphere operating system is related to incorrect code generation management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2021-27080
Azure Sphere Unsigned Code Execution Vulnerability...