Skip to content
OpenAdvisories
High MSRC-CVE-2021-26429 1 CVE

Azure Sphere Elevation of Privilege Vulnerability

Published Aug 10, 2021 · Updated Aug 13, 2021 · Revision 3

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What version of Azure Sphere has the update that protects from this vulnerability?
All versions of Azure Sphere that are 21.07 and higher are protected from this vulnerability.
If your device is new or has not been connected to the internet for a while, connect the device to a secure, private local network with internet access and allow the device to automatically update itself. If the device is already online, verify that the operating system version 21.07 has been installed using the Azure Sphere CLI command:
azsphere device show-os-version
If the device is connected to the internet and does not yet have the latest update, check the update status with the following Azure Sphere CLI command:
azsphere device show-deployment-status
An IoT device that is running Azure Sphere and is connected to a network is automatically updated every day. This vulnerability has already been addressed so the devices are protected from this vulnerability. More information on Azure Sphere’s CVE principles can be found on https://docs.microsoft.com/en-us/azure-sphere/deployment/azure-sphere-cves

Security updates
21.07 — https://docs.microsoft.com/en-us/azure-sphere/product-overview/whats-new

Vulnerabilities 1

Revision history

  1. #3

    Updated acknowledgment. This is an informational change only.

  2. #2

    Added an acknowledgement. This is an informational change only.

  3. #1

    Information published.

References