← Back

CVE-2025-49707

nvd nist
Published: Aug 12, 2025Modified: Aug 20, 2025

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally.

Affected (11)

Microsoft
11 products
Ecesv6 Series Azure Vm Firmware
Dcesv6 Series Azure Vm Firmware
Nccadsh100v5 Series Azure Vm Firmware
Ecedsv5 Series Azure Vm Firmware
Ecesv5 Series Azure Vm Firmware
Dcedsv5 Series Azure Vm Firmware
Dcesv5 Series Azure Vm Firmware
Ecadsv5 Series Azure Vm Firmware
Ecasv5 Series Azure Vm Firmware
Dcadsv5 Series Azure Vm Firmware
Dcasv5 Series Azure Vm Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ecesv6 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Ecesv6 Series Azure Vm
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dcesv6 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Dcesv6 Series Azure Vm
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nccadsh100v5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Nccadsh100v5 Series Azure Vm
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ecedsv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Ecedsv5 Series Azure Vm
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ecesv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Ecesv5 Series Azure Vm
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dcedsv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Dcedsv5 Series Azure Vm
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dcesv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Dcesv5 Series Azure Vm
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ecadsv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Ecadsv5 Series Azure Vm
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ecasv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Ecasv5 Series Azure Vm
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dcadsv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Dcadsv5 Series Azure Vm
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dcasv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Dcasv5 Series Azure Vm
All versions

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (1)

Source: secure@microsoft.com
Vendor Advisory

Timeline

No history available yet.