Azure Sphere Security Vulnerabilities - 2020

CVE-2020-16970

Azure Sphere Unsigned Code Execution Vulnerability

CVE-2020-16981

Azure Sphere Elevation of Privilege Vulnerability

CVE-2020-16982

Azure Sphere Unsigned Code Execution Vulnerability

CVE-2020-16983

Azure Sphere Tampering Vulnerability

CVE-2020-16984

Azure Sphere Unsigned Code Execution Vulnerability

CVE-2020-16985

Azure Sphere Information Disclosure Vulnerability

CVE-2020-16986

Azure Sphere Denial of Service Vulnerability

CVE-2020-16987

Azure Sphere Unsigned Code Execution Vulnerability

CVE-2020-16988

Azure Sphere Elevation of Privilege Vulnerability

CVE-2020-16989

Azure Sphere Elevation of Privilege Vulnerability

CVE-2020-16990

Azure Sphere Information Disclosure Vulnerability

CVE-2020-16991

Azure Sphere Unsigned Code Execution Vulnerability

CVE-2020-16992

Azure Sphere Elevation of Privilege Vulnerability

CVE-2020-16993

Azure Sphere Elevation of Privilege Vulnerability

CVE-2020-16994

Azure Sphere Unsigned Code Execution Vulnerability

CVE-2020-35608

A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses t...

CVE-2020-35609

A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability.