Azure Arc
Monthly
Path traversal (CWE-22) in Microsoft Azure Arc, rated CVSS 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), could allow a remote, unauthenticated attacker to elevate privileges and read or write files outside an intended restricted directory, with high confidentiality, integrity, and availability impact if fully realized. Microsoft's own advisory (secure@microsoft.com) provides no affected version details, no named component, protocol, or endpoint, so the specific exposure prerequisite is not confirmed from available data; CISA SSVC likewise rates exploitation as 'none' and technical impact as only 'partial', suggesting realistic impact is likely narrower than the raw score implies. EPSS is low at 0.47% (40th percentile) and no public exploit code has been identified at time of analysis, so near-term exploitation risk appears limited even though the flaw is remotely automatable.
Azure Arc's confused-deputy flaw (CWE-441) allows a low-privileged, authenticated remote actor to cross the service's management trust boundary and achieve high confidentiality, integrity, and availability impact across connected resources, producing a 9.9 CVSS score with Scope:Changed. Microsoft Azure Arc is affected broadly (CPE cpe:2.3:a:microsoft:azure_arc:-), and exploitation requires a valid low-level Arc/Azure identity rather than being fully unauthenticated. No public exploit has been identified at time of analysis and no CISA KEV entry is present in the provided data, with EPSS low at 0.49% (41st percentile); the vuln.today decision label is act_now because CISA SSVC rates technical impact as total and automation as feasible.
Privilege escalation in Microsoft Azure Arc allows an unauthorized, network-based attacker to bypass authorization checks (CWE-863) and gain elevated privileges over managed hybrid/multicloud resources, with a maximal CVSS 3.1 score of 10.0 driven by a changed scope and high confidentiality/integrity impact. The flaw is reachable remotely without authentication or user interaction (AV:N/AC:L/PR:N/UI:N), and because scope is changed, exploitation can affect resources beyond the initially vulnerable component. Microsoft has released a fix; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.
Path traversal (CWE-22) in Microsoft Azure Arc, rated CVSS 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), could allow a remote, unauthenticated attacker to elevate privileges and read or write files outside an intended restricted directory, with high confidentiality, integrity, and availability impact if fully realized. Microsoft's own advisory (secure@microsoft.com) provides no affected version details, no named component, protocol, or endpoint, so the specific exposure prerequisite is not confirmed from available data; CISA SSVC likewise rates exploitation as 'none' and technical impact as only 'partial', suggesting realistic impact is likely narrower than the raw score implies. EPSS is low at 0.47% (40th percentile) and no public exploit code has been identified at time of analysis, so near-term exploitation risk appears limited even though the flaw is remotely automatable.
Azure Arc's confused-deputy flaw (CWE-441) allows a low-privileged, authenticated remote actor to cross the service's management trust boundary and achieve high confidentiality, integrity, and availability impact across connected resources, producing a 9.9 CVSS score with Scope:Changed. Microsoft Azure Arc is affected broadly (CPE cpe:2.3:a:microsoft:azure_arc:-), and exploitation requires a valid low-level Arc/Azure identity rather than being fully unauthenticated. No public exploit has been identified at time of analysis and no CISA KEV entry is present in the provided data, with EPSS low at 0.49% (41st percentile); the vuln.today decision label is act_now because CISA SSVC rates technical impact as total and automation as feasible.
Privilege escalation in Microsoft Azure Arc allows an unauthorized, network-based attacker to bypass authorization checks (CWE-863) and gain elevated privileges over managed hybrid/multicloud resources, with a maximal CVSS 3.1 score of 10.0 driven by a changed scope and high confidentiality/integrity impact. The flaw is reachable remotely without authentication or user interaction (AV:N/AC:L/PR:N/UI:N), and because scope is changed, exploitation can affect resources beyond the initially vulnerable component. Microsoft has released a fix; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.