CVE-2020-16986
published 2020-11-11CVE-2020-16986: Azure Sphere Denial of Service Vulnerability Azure Sphere Denial of Service Vulnerability
medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
1.25%
65.9th percentile
Azure Sphere Denial of Service Vulnerability
Azure Sphere Denial of Service Vulnerability
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | azure_sphere | >= 20.00 < publication | publication |
| msrc | azure_sphere | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
cvelistv56.2MEDIUM
vendor_msrc6.2MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
Azure Sphere Denial of Service Vulnerability
vendor_msrc·2020-11-10·CVSS 6.2
CVE-2020-16986 [MEDIUM] Azure Sphere Denial of Service Vulnerability
Azure Sphere Denial of Service Vulnerability
FAQ: Azure Sphere is running on IoT devices in my environment. How do I know if any of those devices are affected by this vulnerability?
An IoT device that is running Azure Sphere and is connected to a network is automatically updated every day. This vulnerability has already been addressed so the devices are protected from this vulnerability.
FAQ: This is the first time that a CVE has been issued against Azure Sphere. Why is that?
The Azure Sphere and MSRC bounty team completed a three-month security research challenge, in which we invited researchers to find and report vulnerabilities in the Azure Sphere OS. We appreciate all of the hard work of the researchers, and will be opening up several CVEs to record and reflect this work. More inform
CVEList
Azure Sphere Denial of Service Vulnerability
cvelistv5·2020-11-11·CVSS 6.2
CVE-2020-16986 [MEDIUM] Azure Sphere Denial of Service Vulnerability
Azure Sphere Denial of Service Vulnerability
Azure Sphere Denial of Service Vulnerability
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-11-11
Published