Microsoft: >> Azure Sphere Security Vulnerabilities
Azure Sphere Unsigned Code Execution Vulnerability
CVSS Score
6.2
EPSS Score
0.005
Published
2021-03-11
Azure Sphere Unsigned Code Execution Vulnerability
CVSS Score
9.3
EPSS Score
0.003
Published
2021-03-11
A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses the PACKET_MMAP functionality to trigger this vulnerability.
CVSS Score
7.8
EPSS Score
0.002
Published
2020-12-22
A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability.
CVSS Score
5.5
EPSS Score
0.002
Published
2020-12-22
Azure Sphere Elevation of Privilege Vulnerability
CVSS Score
6.9
EPSS Score
0.002
Published
2020-11-11
Azure Sphere Elevation of Privilege Vulnerability
CVSS Score
5.4
EPSS Score
0.002
Published
2020-11-11
Azure Sphere Information Disclosure Vulnerability
CVSS Score
6.2
EPSS Score
0.005
Published
2020-11-11
Azure Sphere Unsigned Code Execution Vulnerability
CVSS Score
7.3
EPSS Score
0.002
Published
2020-11-11
Azure Sphere Elevation of Privilege Vulnerability
CVSS Score
7.5
EPSS Score
0.002
Published
2020-11-11
Azure Sphere Elevation of Privilege Vulnerability
CVSS Score
5.4
EPSS Score
0.002
Published
2020-11-11