CVE-2020-17002

HighCVSS 7.4/10Last modified Jun 17, 2026

Description

Azure SDK for C Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected software

VendorProductVersions
Microsoftazure-c-shared-utility< publication
MicrosoftAzure-c-shared-utility Release LTS_02_2020_Ref02< publication
MicrosoftAzure-c-shared-utility Release LTS_07_2020_Ref02< publication
Microsoftazure-uamqp-c>= 1.0.0, < publication
Microsoftazure-uamqp-c Release LTS_02_2020_Ref02< publication
Microsoftazure-uamqp-c Release LTS_07_2020_Ref02< publication
Microsoftazure-uhttp-c< publication
Microsoftazure-uhttp-c Release LTS_02_2020_Ref02< publication
Microsoftazure-uhttp-c Release LTS_07_2020_Ref02< publication
Microsoftazure-umqtt-c< publication
Microsoftazure-umqtt-c Release LTS_02_2020_Ref02< publication
Microsoftazure-umqtt-c Release LTS_07_2020_Ref02< publication
Microsoftazure-utpm-c< publication
Microsoftazure-utpm-c Release LTS_02_2020_Ref02< publication
Microsoftazure-utpm-c Release LTS_07_2020_Ref02< publication
MicrosoftC SDK for Azure IoT< publication
MicrosoftC SDK for Azure IoT Release LTS_02_2020_Ref02< publication
MicrosoftC SDK for Azure IoT Release LTS_07_2020_Ref02< publication

References

Timeline

Published
Dec 10, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-170037.8<p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p> <p>An attacker who successfuCVE-2020-170045.5Windows Graphics Component Information Disclosure VulnerabilityCVE-2020-170055.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2020-170065.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2020-170077.0Windows Error Reporting Elevation of Privilege VulnerabilityCVE-2020-17016.5A flaw was found in the KubeVirt main virt-handler versions before 0.26.0 regarding the access permissions of virt-handler. An attacker withCVE-2020-170107.8Win32k Elevation of Privilege VulnerabilityCVE-2020-170117.8Windows Port Class Library Elevation of Privilege VulnerabilityCVE-2020-170127.8Windows Bind Filter Driver Elevation of Privilege VulnerabilityCVE-2020-170135.5Win32k Information Disclosure VulnerabilityCVE-2020-170147.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2020-170154.3Microsoft SharePoint Server Spoofing Vulnerability
CVE-2020-17002: High severity, CVSS 7.4 | Vulnix