CVE-2020-16992
published 2020-11-11CVE-2020-16992: Azure Sphere Elevation of Privilege Vulnerability Azure Sphere Elevation of Privilege Vulnerability
high8.2CVSS 3.1
AVLACLPRHUINSCCHIHAH
EPSS
1.40%
69.2th percentile
Azure Sphere Elevation of Privilege Vulnerability
Azure Sphere Elevation of Privilege Vulnerability
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | azure_sphere | >= 20.00 < publication | publication |
| msrc | azure_sphere | — | — |
CVSS provenance
nvdv3.18.2HIGHCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
cvelistv57.5HIGH
vendor_msrc7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rmqj-67rc-m54g: Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981, CVE-2020-16988, CVE-2020-16989, CVE-2020-16992
ghsa_unreviewed·2022-05-24·CVSS 6.1
CVE-2020-16993 [MEDIUM] CWE-269 GHSA-rmqj-67rc-m54g: Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981, CVE-2020-16988, CVE-2020-16989, CVE-2020-16992
Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981, CVE-2020-16988, CVE-2020-16989, CVE-2020-16992.
GHSA
GHSA-j7mg-79qf-rg92: Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16988, CVE-2020-16989, CVE-2020-16992, CVE-2020-16993
ghsa_unreviewed·2022-05-24·CVSS 6.9
CVE-2020-16981 [MEDIUM] CWE-269 GHSA-j7mg-79qf-rg92: Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16988, CVE-2020-16989, CVE-2020-16992, CVE-2020-16993
Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16988, CVE-2020-16989, CVE-2020-16992, CVE-2020-16993.
GHSA
GHSA-2r72-fwfv-2p48: Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981, CVE-2020-16989, CVE-2020-16992, CVE-2020-16993
ghsa_unreviewed·2022-05-24·CVSS 6.1
CVE-2020-16988 [MEDIUM] CWE-269 GHSA-2r72-fwfv-2p48: Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981, CVE-2020-16989, CVE-2020-16992, CVE-2020-16993
Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981, CVE-2020-16989, CVE-2020-16992, CVE-2020-16993.
GHSA
GHSA-9hgp-2jvm-r82h: Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981, CVE-2020-16988, CVE-2020-16992, CVE-2020-16993
ghsa_unreviewed·2022-05-24·CVSS 6.1
CVE-2020-16989 [MEDIUM] CWE-269 GHSA-9hgp-2jvm-r82h: Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981, CVE-2020-16988, CVE-2020-16992, CVE-2020-16993
Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981, CVE-2020-16988, CVE-2020-16992, CVE-2020-16993.
GHSA
GHSA-xqg2-m4f3-jfv5: Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981, CVE-2020-16988, CVE-2020-16989, CVE-2020-16993
ghsa_unreviewed·2022-05-24·CVSS 6.1
CVE-2020-16992 [MEDIUM] CWE-269 GHSA-xqg2-m4f3-jfv5: Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981, CVE-2020-16988, CVE-2020-16989, CVE-2020-16993
Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981, CVE-2020-16988, CVE-2020-16989, CVE-2020-16993.
CVEList
Azure Sphere Elevation of Privilege Vulnerability
cvelistv5·2020-11-11·CVSS 7.5
CVE-2020-16992 [HIGH] Azure Sphere Elevation of Privilege Vulnerability
Azure Sphere Elevation of Privilege Vulnerability
Azure Sphere Elevation of Privilege Vulnerability
Microsoft
Azure Sphere Elevation of Privilege Vulnerability
vendor_msrc·2020-11-10·CVSS 7.5
CVE-2020-16992 [HIGH] Azure Sphere Elevation of Privilege Vulnerability
Azure Sphere Elevation of Privilege Vulnerability
FAQ: Azure Sphere is running on IoT devices in my environment. How do I know if any of those devices are affected by this vulnerability?
An IoT device that is running Azure Sphere and is connected to a network is automatically updated every day. This vulnerability has already been addressed so the devices are protected from this vulnerability.
FAQ: This is the first time that a CVE has been issued against Azure Sphere. Why is that?
The Azure Sphere and MSRC bounty team completed a three-month security research challenge, in which we invited researchers to find and report vulnerabilities in the Azure Sphere OS. We appreciate all of the hard work of the researchers, and will be opening up several CVEs to record and reflect this work. More i
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-11-11
Published