← Back

CVE-2025-53781

nvd nist
Published: Aug 12, 2025Modified: Sep 10, 2025

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network.

Affected (11)

Microsoft
11 products
Ecesv6 Series Azure Vm Firmware
Dcesv6 Series Azure Vm Firmware
Nccadsh100v5 Series Azure Vm Firmware
Ecedsv5 Series Azure Vm Firmware
Ecesv5 Series Azure Vm Firmware
Dcedsv5 Series Azure Vm Firmware
Dcesv5 Series Azure Vm Firmware
Ecadsv5 Series Azure Vm Firmware
Ecasv5 Series Azure Vm Firmware
Dcadsv5 Series Azure Vm Firmware
Dcasv5 Series Azure Vm Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ecesv6 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Ecesv6 Series Azure Vm
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dcesv6 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Dcesv6 Series Azure Vm
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nccadsh100v5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Nccadsh100v5 Series Azure Vm
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ecedsv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Ecedsv5 Series Azure Vm
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ecesv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Ecesv5 Series Azure Vm
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dcedsv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Dcedsv5 Series Azure Vm
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dcesv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Dcesv5 Series Azure Vm
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ecadsv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Ecadsv5 Series Azure Vm
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ecasv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Ecasv5 Series Azure Vm
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dcadsv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Dcadsv5 Series Azure Vm
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dcasv5 Series Azure Vm Firmware
All versions
Running on/withPlatform Versions
Microsoft
Dcasv5 Series Azure Vm
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

Source: secure@microsoft.com
Vendor Advisory

Timeline

No history available yet.