Azure Sphere Unsigned Code Execution Vulnerability
CVE-2021-27080 is a remote code execution vulnerability in Azure Sphere (rated Critical, CVSS 9.3).
1 version
Facts
- Microsoft id
CVE-2021-27080- Products
- Azure Sphere
- Severity
- Critical
- Impact
- Remote Code Execution
- CVSS
- 9.3
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Exploited
- No
- Publicly disclosed
- No
- Exploitability
- Exploitation Less Likely
- Customer action required
- Yes
- Release
- 2021-Mar
- Assigned by
- Microsoft
- MSRC revision
- 1.0
- Status pages
- Azure Sphere status
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2021-03-09:
Information published.
Microsoft says
What version of Azure Sphere has the update that protects from this vulnerability?
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
The text as we first saw it
Seen by us · Microsoft's timestamp · Microsoft's page
Related changes
Mentioning the same Microsoft ids
- Azure Sphere OS version 21.03 is now generally available · Launched
- Azure Sphere OS version 21.03 is now available for evaluation · Launched
Other changes for Azure Sphere
- Public Preview: Azure Sphere support for European Data Boundary · In preview
- Important Notice: Azure Product Retirement: End of Life Announcement of Azure Sphere classic CLI on 30 September 2024. Replace with Azure Sphere CLI
- General Availability: The Azure Sphere OS 22.01 release is cancelled
- General Availability: Azure Sphere version 22.11 · Launched
- General availability: Azure Sphere version 22.09 · Launched
- General availability: Azure Sphere version 22.07 · Launched
- General availability: Azure Sphere version 22.02 expected on Feb 28, 2022 · Launched
- General availability: Azure Sphere version 22.02 · Launched
Last updated