Vulnerability Spotlight: Multiple remote code execution vulnerabilities in Microsoft Azure Sphere
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-27047 | HEVC Video Extensions Remote Code Execution Vulnerability | 7.8 | 3% | ||
| CVE-2021-27080 | Azure Sphere Unsigned Code Execution Vulnerability | 9.3 | 1% | PoC | |
| CVE-2021-28460 | Azure Sphere Unsigned Code Execution Vulnerability | 8.1 | <1% |
From the original article
2 min read at blog.talosintelligence.com
Claudio Bozzato and Lilith >_> of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos researchers recently discovered multiple vulnerabilities in Microsoft’s Azure Sphere, a cloud-connected and custom SoC platform designed specifically with IoT application security in mind.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.