Azure Sphere

CVE-2022-35821 Aug 09, 20:15 MEDIUM This Month

Azure Sphere Information Disclosure Vulnerability. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

CVE-2021-42300 Nov 10, 01:19 MEDIUM PATCH This Month

Azure Sphere Tampering Vulnerability. Rated medium severity (CVSS 6.0), this vulnerability is low attack complexity.

CVE-2021-41376 Nov 10, 01:19 LOW PATCH Monitor

Azure Sphere Information Disclosure Vulnerability. Rated low severity (CVSS 2.3), this vulnerability is low attack complexity.

CVE-2021-41375 Nov 10, 01:19 MEDIUM PATCH This Month

Azure Sphere Information Disclosure Vulnerability. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity.

CVE-2021-41374 Nov 10, 01:19 MEDIUM PATCH This Month

Azure Sphere Information Disclosure Vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is no authentication required.

CVE-2021-36956 Sep 15, 12:15 MEDIUM PATCH This Month

Azure Sphere Information Disclosure Vulnerability. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity.

CVE-2021-26430 Aug 12, 18:15 MEDIUM PATCH This Month

Azure Sphere Denial of Service Vulnerability. Rated medium severity (CVSS 6.0), this vulnerability is low attack complexity.

CVE-2021-26429 Aug 12, 18:15 HIGH PATCH This Week

Azure Sphere Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.7).

CVE-2021-26428 Aug 12, 18:15 MEDIUM PATCH This Month

Azure Sphere Information Disclosure Vulnerability. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity.

CVE-2021-28460 Apr 13, 20:15 HIGH PATCH This Week

Azure Sphere Unsigned Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is no authentication required.

CVE-2021-27080 Mar 11, 16:15 CRITICAL POC PATCH Act Now

Azure Sphere Unsigned Code Execution Vulnerability. Rated critical severity (CVSS 9.3), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

CVE-2021-27074 Mar 11, 16:15 MEDIUM POC PATCH This Month

Azure Sphere Unsigned Code Execution Vulnerability. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

CVE-2020-35609 Dec 22, 20:15 MEDIUM POC This Month

A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

CVE-2020-35608 Dec 22, 20:15 HIGH POC This Week

A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

CVE-2020-16994 Nov 11, 07:15 HIGH POC PATCH This Week

Azure Sphere Unsigned Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

CVE-2020-16993 Nov 11, 07:15 MEDIUM PATCH This Month

Azure Sphere Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.4). This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

CVE-2020-16992 Nov 11, 07:15 HIGH POC PATCH This Week

Azure Sphere Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5). Public exploit code available.

CVE-2020-16991 Nov 11, 07:15 HIGH POC PATCH This Week

Azure Sphere Unsigned Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

CVE-2020-16990 Nov 11, 07:15 MEDIUM PATCH This Month

Azure Sphere Information Disclosure Vulnerability. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. This Incorrect Permission Assignment vulnerability could allow attackers to access resources due to misconfigured permissions.

CVE-2020-16989 Nov 11, 07:15 MEDIUM PATCH This Month

Azure Sphere Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.4).

CVE-2020-16988 Nov 11, 07:15 MEDIUM PATCH This Month

Azure Sphere Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.9).

CVE-2020-16987 Nov 11, 07:15 HIGH PATCH This Week

Azure Sphere Unsigned Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is no authentication required, low attack complexity.

CVE-2020-16986 Nov 11, 07:15 MEDIUM POC PATCH This Month

Azure Sphere Denial of Service Vulnerability. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

CVE-2020-16985 Nov 11, 07:15 MEDIUM POC PATCH This Month

Azure Sphere Information Disclosure Vulnerability. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

CVE-2020-16984 Nov 11, 07:15 HIGH PATCH This Week

Azure Sphere Unsigned Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is no authentication required, low attack complexity.

CVE-2020-16983 Nov 11, 07:15 MEDIUM PATCH This Month

Azure Sphere Tampering Vulnerability. Rated medium severity (CVSS 5.7).

CVE-2020-16982 Nov 11, 07:15 MEDIUM POC PATCH This Month

Azure Sphere Unsigned Code Execution Vulnerability. Rated medium severity (CVSS 6.1). Public exploit code available.

CVE-2020-16981 Nov 11, 07:15 MEDIUM PATCH This Month

Azure Sphere Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.1).

CVE-2020-16970 Nov 11, 07:15 HIGH POC PATCH This Week

Azure Sphere Unsigned Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is no authentication required. Public exploit code available.