CVE-2021-26430
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
A vulnerability in Azure Sphere allows a denial of service (DoS) attack. An attacker could exploit this flaw to disrupt the service.
Risk Assessment
The risk is the potential disruption of Azure Sphere services, which could affect the availability of IoT devices.
Recommendation
It is recommended to update Azure Sphere to the latest version that includes security fixes.
Other vulnerabilities in Azure Sphere
See all- CVE-2021-27080Critical
Unsigned code execution vulnerability in Azure Sphere. An attacker could exploit this flaw to run unauthorized code.
- CVE-2021-42300Medium
Tampering vulnerability in Azure Sphere. An attacker could modify data or software on Azure Sphere devices.
- CVE-2021-41376Low
Information Disclosure Vulnerability in Azure Sphere. Details are not provided in the description, but the vulnerability may lead to data leakage.
- CVE-2021-41375Medium
Information Disclosure Vulnerability in Azure Sphere. An attacker could gain access to sensitive information.
- CVE-2021-41374Medium
Information disclosure vulnerability in Azure Sphere. Could allow an attacker to gain unauthorized access to data.
- CVE-2021-36956Medium
Information Disclosure vulnerability in Azure Sphere. Could allow an attacker to read data from memory.
- CVE-2021-26429High
Elevation of privilege vulnerability in Azure Sphere. An attacker could exploit it to gain higher privileges on the system.
- CVE-2021-26428Medium
A vulnerability in Azure Sphere allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
- CVE-2021-27074Medium
Unsigned code execution vulnerability in Azure Sphere.
Original NVD description (English source)
Azure Sphere Denial of Service Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS