CVE-2021-42304 is an Elevation of Privilege vulnerability affecting Microsoft Azure RTOS. With a CVSS score of 6.8 (MEDIUM), this vulnerability has a physical attack vector with low complexity, allowing an attacker to achieve high confidentiality, integrity, and availability impact. While not currently on the KEV catalog or Hot List, and lacking public exploit code, it has received some community discussion and media coverage, indicating awareness of its existence.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 6.1.9CPE matchmatch criteria | cpe:2.3:o:microsoft:azure_real_time_operating_system:*:*:*:*:*:*:*:* | ||
>= 6.0.0, < 6.1.9CPE match | cpe:2.3:a:microsoft:azure_real_time_operating_system:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.