PT-2020-17360 · Microsoft · Azure Sphere

Claudio Bozzato + 2 · Published 2020-12-22 · Updated 2020-12-23 · CVE-2020-35608

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Azure Sphere version 20.07

Description A code execution issue exists in the signed code execution functionality. A specially crafted AF PACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute shellcode that uses the PACKET MMAP functionality to trigger this issue.

Recommendations For Microsoft Azure Sphere version 20.07, consider disabling the use of AF PACKET sockets until a patch is available. As a temporary workaround, restrict access to the PACKET MMAP functionality to minimize the risk of exploitation.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2020-35608

Affected Products

Azure Sphere

References · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1134 · Exploit
• https://osv.dev/vulnerability/CVE-2020-35608 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35608 · Security Note
• https://t.me/cibsecurity/21184 · Telegram Post