Cristian Pop

The issue is related to errors in privilege management in the Azure IoT CLI interface. Exploitation of this issue may allow an attacker to elevate their privileges.

The issue is related to a security feature bypass vulnerability in the Azure SDK for C, which can be exploited by a remote attacker to impact the confidentiality and integrity of protected information.

A remote code execution issue exists due to the way the Azure IoT Hub Device Client SDK accesses objects in memory. This can be exploited by a remote attacker to execute arbitrary code with the privileges of the current user by using a specially crafted message.

A spoofing issue exists due to improper certificate validation over the AMQP protocol. This affects the C# SDK, C SDK, and Java SDK.