WID-SEC-W-2024-2120

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Azure: Mehrere Schwachstellen

view advisory published 2024-09-10

Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure Komponenten ausnutzen, um seine Privilegien zu erhöhen und beliebigen Code auszuführen.

describes (6)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-43470US	—	0.85% (58th)	—	2024-09-10
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
CVE-2024-43469US	—	1.59% (76th)	—	2024-09-10
Azure CycleCloud Remote Code Execution Vulnerability
CVE-2024-38220US	—	1.03% (64th)	—	2024-09-10
Azure Stack Hub Elevation of Privilege Vulnerability
CVE-2024-38216US	critical9.0	0.92% (60th)	—	2024-09-10
Azure Stack Hub Elevation of Privilege Vulnerability
CVE-2024-38194US	critical9.9	1.28% (70th)	—	2024-09-10
An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.
CVE-2024-38188US	—	0.58% (47th)	—	2024-09-10
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.