CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-29053 – Microsoft Defender for IoT Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-29053
Microsoft Defender for IoT Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft Defender para IoT • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29053 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-36: Absolute Path Traversal •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-23379 – Microsoft Defender for IoT Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-23379
Microsoft Defender for IoT Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23379 • CWE-23: Relative Path Traversal •
CVSS: 8.8EPSS: 4%CPEs: 1EXPL: 0CVE-2022-23265 – Microsoft Defender for IoT Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-23265
Microsoft Defender for IoT Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota de Microsoft Defender for IoT This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Azure Defender for IoT. An attacker must first obtain the ability to execute code as the www-data user on the target system in order to exploit this vulnerability. The specific flaw exists within the password change mechanism. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23265 •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-23266 – Microsoft Defender for IoT Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2022-23266
Microsoft Defender for IoT Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios de Microsoft Defender for IoT This vulnerability allows remote attackers to escalate privileges on affected installations of Microsoft Azure Defender for IoT. Authentication is required to exploit this vulnerability. The specific flaw exists within the password change mechanism. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23266 •
CVSS: 7.2EPSS: 1%CPEs: 1EXPL: 0CVE-2021-43889 – Microsoft Defender for IoT Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-43889
Microsoft Defender for IoT Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota de Microsoft Defender de IoT. Este ID de CVE es diferente de CVE-2021-41365, CVE-2021-42310, CVE-2021-42311, CVE-2021-42313, CVE-2021-42314, CVE-2021-42315, CVE-2021-43882 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43889 •