Azure Sphere CVE-2020-16993

MEDIUM

Improper Privilege Management (CWE-269)

2020-11-11 secure@microsoft.com

Privilege Escalation Microsoft Azure Sphere

5.4

CVSS 3.1 · Vendor: microsoft

Share

Severity by source

Vendor (microsoft) PRIMARY

5.4 MEDIUM

AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Physical

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

1

CVE Published

Nov 11, 2020 - 07:15 cve.org

MEDIUM 5.4

DescriptionCVE.org

Azure Sphere Elevation of Privilege Vulnerability

AnalysisAI

Azure Sphere Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.4). This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Technical ContextAI

This vulnerability is classified as Improper Privilege Management (CWE-269), which allows attackers to escalate privileges to gain unauthorized elevated access. Affected products include: Microsoft Azure Sphere.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply principle of least privilege, validate privilege transitions, implement proper role separation.

More in Azure Sphere

View all

CVE-2021-27080 CRITICAL Act Now POC

Azure Sphere Unsigned Code Execution Vulnerability. Rated critical severity (CVSS 9.3), this vulnerability is no authent

CVE-2020-16970 HIGH This Week POC

Azure Sphere Unsigned Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is no authenticat

CVE-2020-35608 HIGH This Week POC

A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Spher

CVE-2020-16992 HIGH This Week POC

Azure Sphere Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5). Public exploit code available.

CVE-2020-16994 HIGH This Week POC

Azure Sphere Unsigned Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is no authenticat

CVE-2020-16991 HIGH This Week POC

Azure Sphere Unsigned Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is no authenticat

CVE-2021-27074 MEDIUM This Month POC

Azure Sphere Unsigned Code Execution Vulnerability. Rated medium severity (CVSS 6.2), this vulnerability is no authentic

CVE-2020-16986 MEDIUM This Month POC

Azure Sphere Denial of Service Vulnerability. Rated medium severity (CVSS 6.2), this vulnerability is no authentication

CVE-2020-16985 MEDIUM This Month POC

Azure Sphere Information Disclosure Vulnerability. Rated medium severity (CVSS 6.2), this vulnerability is no authentica

CVE-2020-16982 MEDIUM This Month POC

Azure Sphere Unsigned Code Execution Vulnerability. Rated medium severity (CVSS 6.1). Public exploit code available.

CVE-2020-35609 MEDIUM This Month POC

A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. Rated

CVE-2021-28460 HIGH This Week

Azure Sphere Unsigned Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is no authenticat

Same weakness CWE-269 – Improper Privilege Management

View all

CVE-2017-5689 CRITICAL POC

CVE-2017-12635 CRITICAL POC

CVE-2012-3993 CRITICAL POC

CVE-2017-11467 CRITICAL POC

CVE-2014-1510 CRITICAL POC

CVE-2014-1511 CRITICAL POC

CVE-2016-0151 HIGH POC

CVE-2013-0643 HIGH

Same technique Privilege Escalation

View all

CVE-2025-47812 CRITICAL POC

CVE-2013-0422 CRITICAL POC

CVE-2013-0632 CRITICAL POC

CVE-2017-5689 CRITICAL POC

CVE-2017-12635 CRITICAL POC

CVE-2016-10372 CRITICAL POC

CVE-2014-9583 CRITICAL POC

CVE-2012-0297 CRITICAL POC

Share

CVE-2020-16993 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy