Remote code execution

A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AFPACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses...

CVE-2020-35609

A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability...

CVE-2020-35609

CVE-2020-35609 affects Microsoft Azure Sphere 20.05, specifically the asynchronous ioctl path of the /dev/pluton interface. TALOS documents a denial-of-service scenario triggered by a rapid sequence of asynchronous ioctls that fill the Pluton ring buffer, causing the M4/A7 communication to stall ...

CVE-2020-35608

Summary (verified) : CVE-2020-35608 affects Microsoft Azure Sphere 20.07. Affected component: the normal world’s signed code execution path. Root cause : a specially crafted AF_PACKET socket can cause a process to create an executable memory mapping with controllable content. Impact : local code ...

CVE-2020-35608

A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AFPACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses...

Microsoft Azure Sphere 注入漏洞

Microsoft Azure Sphere is an appliance from Microsoft USA that is used to provide security in cloud environments. A denial of service vulnerability exists in Microsoft Azure Sphere version 20.05, which stems from the asynchronous ioctl feature of Microsoft Azure Sphere 20.05. An attacker could...

Microsoft Azure Sphere 注入漏洞

Microsoft Azure Sphere is an appliance from Microsoft USA that is used to provide security in cloud environments. A code execution vulnerability exists in Microsoft Azure Sphere version 20.07, which stems from the Regular Signed Code Execution feature allowing arbitrary code execution. An attacke...

Microsoft Azure Sphere networkd mdns denial-of-service vulnerability

Summary A denial-of-service vulnerability exists in the networkd mDNS functionality of Microsoft Azure Sphere 20.07. A specific bind call can cause a denial of service, requiring manual recovery. An attacker can bind to port 5353 to trigger this vulnerability. Tested Versions Microsoft Azure Sphe...

KLA12021 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in Azure SDK for Java can be exploited remotely to...

Microsoft Azure Sphere Security Vulnerability

Microsoft Azure Sphere is an appliance from Microsoft that provides security for cloud environments. Azure Sphere Security Feature Bypass Vulnerability, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements. The following products an...

Vulnerabilities fixed in Microsoft Azure

Vulnerabilities have been fixed in Azure. The vulnerabilities allow a malicious person to bypass security measures. Azure Sphere: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |. |----------------|------|-------------------------------------| |...

The vulnerability of the Azure Sphere operating system’s MTD driver allows a hacker to execute arbitrary code.

The vulnerability of the Azure Sphere operating system’s driver relates to errors in code generation management. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Littlefs Quota component in the Azure Sphere operating system allows a hacker to trigger a service failure.

The vulnerability of the Littlefs Quota component in the Azure Sphere operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability in the socket implementation of Azure Sphere’s operating system allows a hacker to execute arbitrary code. [source-iocs-preserved const=AF_AZSPIO]

The vulnerability of the socket implementation in Azure Sphere’s operating system is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code. source-iocs-preserved const=AFAZSPIO...

The vulnerability of the Azure Sphere operating system, related to privilege management errors, allows a perpetrator to escalate their privileges.

The vulnerability of the Azure Sphere operating system is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the Azure Sphere operating system, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of the Azure Sphere operating system is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted request...

The vulnerability of the Azure Sphere operating system, related to privilege management errors, allows a perpetrator to escalate their privileges.

The vulnerability of the Azure Sphere operating system is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the Azure Sphere operating system, related to privilege management errors, allows a perpetrator to escalate their privileges.

The vulnerability of the Azure Sphere operating system is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the Azure Sphere operating system, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the Azure Sphere operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Azure Sphere operating system, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Azure Sphere operating system is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created request...