Vulnerability Spotlight: Microsoft issues security update for Azure Sphere

guest · Jul 31, 2020

Vulnerability Spotlight: Microsoft issues security update for Azure Sphere
July 31, 2020
https://blog.talosintelligence.com/2020/07/vuln-spotlight-azure-sphere-july-2020.html

Cisco Talos researchers recently discovered seven vulnerabilities in Microsoft’s Azure Sphere, a cloud-connected SoC platform designed specifically with IoT application security in mind.

Talos discovered two chainable vulnerabilities within Azure Sphere that, assuming an attacker could flash a malicious application, would allow for arbitrary writing to anywhere in the /mnt/config partition, resulting in further privilege escalation. These vulnerabilities were also discovered in tandem by McAfee Advanced Threat Research.

In accordance with our coordinated disclosure policy, Cisco Talos worked with Microsoft to ensure that these issues are resolved and that an update is available for affected customers. However, Microsoft declined to assign CVEs to these vulnerabilities.
Click to expand...

Versions tested
Talos tested and confirmed that these vulnerabilities affect Microsoft Azure Sphere, version 20.05.
Click to expand...

guest · Aug 25, 2020

Microsoft Patches Code Execution, Privilege Escalation Flaws in Azure Sphere
August 25, 2020
https://www.securityweek.com/micros...ution-privilege-escalation-flaws-azure-sphere

The cloud-based system on a chip (SoC) platform was designed for Internet of Things (IoT) security, and is comprised of a hardware platform (several ARM cores, each with a different role), Azure Sphere OS (custom, Linux-based OS), and the Azure Sphere Security Service (for continuous security).

Talos’ security researchers discovered a total of four vulnerabilities in Azure Sphere, two of which could lead to the execution of unsigned code, and two leading to privilege escalation. All bugs were addressed, although no CVEs were issued.
According to Talos, both of the code execution flaws affect “the normal world’s signed code execution functionality of Microsoft Azure Sphere.”

Microsoft has published a blog post detailing the improvements and fixes included in Azure Sphere 20.08, which patches the vulnerabilities.
Click to expand...

Cisco Talos: Vulnerability Spotlight: Remote code execution, privilege escalation bugs in Microsoft Azure Sphere

The discovery of these vulnerabilities continues our research into Azure Sphere and follows the multiple vulnerabilities we disclosed in July.
Click to expand...

guest · Nov 10, 2021

Cisco Talos finds 10 vulnerabilities in Azure Sphere’s Linux kernel, Security Monitor and Pluton
November 9, 2021
https://blog.talosintelligence.com/2021/11/cisco-talos-finds-10-vulnerabilities-in.html

Following our previous engagements (see blog posts 1, 2, 3 and 4) with Microsoft's Azure Sphere IoT platform, we decided to take another look at the device, without all the rush and commotion that normally entails a hacking challenge.

Today, we’re disclosing another 10 vulnerabilities in Azure Sphere — two of which are on the Linux side, seven that exist in Security Monitor and one in the Pluton security subsystem.
previous architectural overview, this post will simply walk through the vulnerabilities we discovered as part of our continued research into Azure Sphere, starting with the Linux kernel side.
Click to expand...

Microsoft issued the following statement on the two vulnerabilities listed above:

We thank Cisco Talos for sharing their continued research into Azure Sphere, which first started during the Azure Sphere Security Research Challenge in 2020. After reviewing the findings on TALOS-2021-1341 and TALOS-2021-1344, Microsoft believes the approach described is implemented by design and does not present a security risk to customer production environments. For more information on our conclusion, please read our full statement on these Cisco Talos advisories.
Click to expand...

guest · Nov 22, 2021

A review of Azure Sphere vulnerabilities: Unsigned code execs, kernel bugs, escalation chains and firmware downgrades
Summary of all the vulnerabilities reported by Cisco Talos in Microsoft Azure Sphere
November 22, 2021
https://blog.talosintelligence.com/2021/11/a-review-of-azure-sphere.html

In May 2020, Microsoft kicked off the Azure Sphere Security Research Challenge, a three-month initiative aimed at finding bugs in Azure Sphere. In the first three months, Cisco Talos reported 16 vulnerabilities. Our analysis continued intermittently, and eventually, we discovered and reported a total of 31 published vulnerabilities, two of which were present in the Linux kernel itself.

We already released several blog posts about Azure Sphere (see blog posts 1, 2, 3, 4, 5). Today, we’re putting a bow on our research by summarizing what we’ve found and how attackers could exploit them, and what that would mean for the user. We also have another blog post coming next week that will detail how we exploited a chain of two vulnerabilities to gain arbitrary kernel code execution.
Click to expand...

Log in or Sign up

Vulnerability Spotlight: Microsoft issues security update for Azure Sphere

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Vulnerability Spotlight: Microsoft issues security update for Azure Sphere

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches