CVE-2020-16983
published 2020-11-11CVE-2020-16983: Azure Sphere Tampering Vulnerability Azure Sphere Tampering Vulnerability
medium6.2CVSS 3.1
AVPACLPRHUINSUCHIHAH
EPSS
0.66%
47.6th percentile
Azure Sphere Tampering Vulnerability
Azure Sphere Tampering Vulnerability
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | azure_sphere | >= 20.00 < publication | publication |
| msrc | azure_sphere | — | — |
CVSS provenance
nvdv3.16.2MEDIUMCVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
cvelistv55.7MEDIUM
vendor_msrc5.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
Azure Sphere Tampering Vulnerability
vendor_msrc·2020-11-10·CVSS 5.7
CVE-2020-16983 [MEDIUM] Azure Sphere Tampering Vulnerability
Azure Sphere Tampering Vulnerability
FAQ: Azure Sphere is running on IoT devices in my environment. How do I know if any of those devices are affected by this vulnerability?
An IoT device that is running Azure Sphere and is connected to a network is automatically updated every day. This vulnerability has already been addressed so the devices are protected from this vulnerability.
FAQ: This is the first time that a CVE has been issued against Azure Sphere. Why is that?
The Azure Sphere and MSRC bounty team completed a three-month security research challenge, in which we invited researchers to find and report vulnerabilities in the Azure Sphere OS. We appreciate all of the hard work of the researchers, and will be opening up several CVEs to record and reflect this work. More information on
CVEList
Azure Sphere Tampering Vulnerability
cvelistv5·2020-11-11·CVSS 5.7
CVE-2020-16983 [MEDIUM] Azure Sphere Tampering Vulnerability
Azure Sphere Tampering Vulnerability
Azure Sphere Tampering Vulnerability
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-11-11
Published