1290 matches found
CVE-2021-42300
Azure Sphere Tampering Vulnerability...
CVE-2021-41376
Azure Sphere Information Disclosure Vulnerability...
CVE-2021-41374
Azure Sphere Information Disclosure Vulnerability...
CVE-2021-41375
Azure Sphere Information Disclosure Vulnerability...
Cisco Talos finds 10 vulnerabilities in Azure Sphere’s Linux kernel, Security Monitor and Pluton
By Claudio Bozzato and Lilith --;. Following our previous engagements see blog posts 1, 2, 3 and 4 with Microsoft's Azure Sphere IoT platform, we decided to take another look at the device, without all the rush and commotion that normally entails a hacking challenge. Today, we’re... This is only...
CVE-2021-42300 Azure Sphere Tampering Vulnerability
...
CVE-2021-42300
CVE-2021-42300 corresponds to Microsoft Azure Sphere Tampering Vulnerability. Connected sources indicate Azure Sphere (and related Azure RTOS/FSLogix entries) are affected by a tampering issue arising from insufficient access control, enabling local attacker access. The CVSS:3.1 vector (AV:L/AC:L...
CVE-2021-41376 Azure Sphere Information Disclosure Vulnerability
...
CVE-2021-41376
CVE-2021-41376 is an Azure Sphere Information Disclosure vulnerability. Connected sources confirm Azure Sphere as the affected product with potential access to sensitive information, categorized as information disclosure with local access requirements. Microsoft and North‑Western advisories indic...
CVE-2021-41375 Azure Sphere Information Disclosure Vulnerability
...
CVE-2021-41375
Azure Sphere Information Disclosure Vulnerability (CVE-2021-41375) affects Microsoft Azure Sphere OS. Connected sources corroborate an information-disclosure issue with Azure Sphere, CVSS around 4.4 (MEDIUM) and remote vector listed as LOCAL with high privileges required in some vectors; official...
CVE-2021-41374 Azure Sphere Information Disclosure Vulnerability
...
CVE-2021-41374 Azure Sphere Information Disclosure Vulnerability
...
CVE-2021-41374
CVE-2021-41374 concerns Microsoft Azure Sphere Information Disclosure Vulnerability. Connected documents affirm Azure Sphere as affected. CVSS data indicate an attacker with local access and low privileges could cause confidentiality impact (C: HIGH; I/N/A N) per CVSS v3.1, while CVSS v2.0/3.1 me...
CVE-2021-41375: Undefined Security Weakness
Azure Sphere Information Disclosure Vulnerability...
Microsoft Azure Sphere Data Forgery Issue Vulnerability
Microsoft Azure Sphere, a Microsoft appliance used to provide security in cloud environments, is vulnerable to a data forgery issue. The vulnerability stems from a network system or product that does not adequately verify the origin or authenticity of data. An attacker could use the falsified dat...
Microsoft Azure Sphere Information Disclosure Vulnerability (CNVD-2021-93635)
Microsoft Azure Sphere is a security vulnerability in Microsoft Azure Sphere, an appliance used by Microsoft to provide security in cloud environments. No details of the vulnerability are currently available...
Microsoft Azure Sphere Buffer Overflow Vulnerability
Microsoft Azure Sphere is an appliance used to provide security in cloud environments by Microsoft Corporation USA. No detailed vulnerability details are available at this time...