writeups.xyz / Pwning Microsoft Azure Defender for IoT | Multiple Flaws Allow Remote Code Execution for All

Submitter : c2a

Date: 28 March 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• Memory Corruption
• SQL Injection

Programs :

• Microsoft

Authors :

• Kasif Dekel (@Kasifdekel)
• Ronen Shustin (@Ronenshh)

Link :
https://www.sentinelone.com/labs/pwning-microsoft-azure-defender-for-iot-multiple-flaws-allow-remote-code-execution-for-all/