Known vulnerabilities in Microsoft Defender for IoT

Vendor: Microsoft
Software: Microsoft Defender for IoT
Software CPE: cpe:2.3:a:microsoft:microsoft_defender_for_iot:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 20
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Defender for IoT Microsoft Defender for IoT is affected by 20 known vulnerabilities: 1 high, 8 medium, 11 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93934 - Improper Privilege Management
CVE-2024-38089		 CWE-269 Low
No
No
 - 09.07.2024 SB2024070985
#VU88361 - Improper Privilege Management
CVE-2024-21324		 CWE-269 Low
No
No
 - 10.04.2024 SB2024041013
#VU88360 - Improper Access Control
CVE-2024-29054		 CWE-284 Low
No
No
 - 10.04.2024 SB2024041013
#VU88359 - Improper Access Control
CVE-2024-29055		 CWE-284 Low
No
No
 - 10.04.2024 SB2024041013
#VU88333 - Absolute Path Traversal
CVE-2024-21323		 CWE-36 Medium
No
No
 - 09.04.2024 SB2024040985
#VU88332 - Absolute Path Traversal
CVE-2024-29053		 CWE-36 Medium
No
No
 - 09.04.2024 SB2024040985
#VU88331 - Command injection
CVE-2024-21322		 CWE-77 Low
No
No
 - 09.04.2024 SB2024040985
#VU72221 - Permissions, Privileges, and Access Controls
CVE-2023-23379		 CWE-264 Low
No
No
 - 15.02.2023 SB2023021507
#VU61162 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-23265		 CWE-94 Low
No
No
 - 08.03.2022 SB2022030836
#VU61161 - Permissions, Privileges, and Access Controls
CVE-2022-23266		 CWE-264 Low
No
No
 - 08.03.2022 SB2022030836
#VU58922 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42315		 CWE-94 Medium
No
No
 - 14.12.2021 SB2021121450
#VU58921 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42314		 CWE-94 Medium
No
No
 - 14.12.2021 SB2021121450
#VU58920 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42313		 CWE-94 Medium
No
No
 - 14.12.2021 SB2021121450
#VU58919 - Permissions, Privileges, and Access Controls
CVE-2021-42312		 CWE-264 Low
No
No
 - 14.12.2021 SB2021121450
#VU58918 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42311		 CWE-94 Medium
No
No
 - 14.12.2021 SB2021121450
#VU58917 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42310		 CWE-94 High
No
No
 - 14.12.2021 SB2021121450
#VU58916 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-41365		 CWE-94 Medium
No
No
 - 14.12.2021 SB2021121450
#VU58913 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43882		 CWE-94 Low
No
No
 - 14.12.2021 SB2021121450
#VU58910 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43888		 CWE-200 Medium
No
No
 - 14.12.2021 SB2021121450
#VU58909 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43889		 CWE-94 Low
No
No
 - 14.12.2021 SB2021121450