Known vulnerabilities in Azure Sphere

Vendor: Microsoft
Software: Azure Sphere
Software CPE: cpe:2.3:a:microsoft:azure_sphere:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 36
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Azure Sphere Azure Sphere is affected by 36 known vulnerabilities: 3 high, 1 medium, 32 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66323 - Exposure of sensitive information to an unauthorized actor
CVE-2022-35821		 CWE-200 Low
No
No
 - 09.08.2022 SB2022080958
#VU58031 - Permissions, Privileges, and Access Controls
CVE-2021-42300		 CWE-264 Low
No
No
 - 09.11.2021 SB2021110912
#VU58030 - Exposure of sensitive information to an unauthorized actor
CVE-2021-41376		 CWE-200 Low
No
No
 - 09.11.2021 SB2021110912
#VU58029 - Exposure of sensitive information to an unauthorized actor
CVE-2021-41375		 CWE-200 Low
No
No
 - 09.11.2021 SB2021110912
#VU58028 - Exposure of sensitive information to an unauthorized actor
CVE-2021-41374		 CWE-200 Low
No
No
 - 09.11.2021 SB2021110912
#VU56508 - Exposure of sensitive information to an unauthorized actor
CVE-2021-36956		 CWE-200 Low
No
No
 - 14.09.2021 SB2021091420
#VU55724 - Exposure of sensitive information to an unauthorized actor
CVE-2021-26428		 CWE-200 Low
No
No
 - 10.08.2021 SB2021081033
#VU55723 - Permissions, Privileges, and Access Controls
CVE-2021-26429		 CWE-264 Low
No
No
 - 10.08.2021 SB2021081033
#VU55722 - Improper input validation
CVE-2021-26430		 CWE-20 Low
No
No
 - 10.08.2021 SB2021081033
#VU52145 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28460		 CWE-94 High
No
No
 - 13.04.2021 SB2021041331
#VU51349 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-27074		 CWE-94 High
No
No
 - 09.03.2021 SB2021030954
#VU51348 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-27080		 CWE-94 High
No
No
 - 09.03.2021 SB2021030954
#VU48877 - Security Features
CVE-2020-17160		 CWE-254 Medium
No
No
 - 08.12.2020 SB2020120838
#VU48254 - Permissions, Privileges, and Access Controls
CVE-2020-16983		 CWE-264 Low
No
No
 - 10.11.2020 SB2020111025
#VU48253 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-16994		 CWE-94 Low
No
No
 - 10.11.2020 SB2020111025
#VU48245 - Exposure of sensitive information to an unauthorized actor
CVE-2020-16985		 CWE-200 Low
No
No
 - 10.11.2020 SB2020111025
#VU48243 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-16984		 CWE-94 Low
No
No
 - 10.11.2020 SB2020111025
#VU48242 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-16982		 CWE-94 Low
No
No
 - 10.11.2020 SB2020111025
#VU48241 - Permissions, Privileges, and Access Controls
CVE-2020-16981		 CWE-264 Low
No
No
 - 10.11.2020 SB2020111025
#VU48240 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-16970		 CWE-94 Low
No
No
 - 10.11.2020 SB2020111025


Showing elements 1 - 20 out of 36