high7.9
CVE-2025-49707
Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally.
Impact
Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Ecesv6-Series Azure Vm Firmware | All versions |
| Microsoft | Dcesv6-Series Azure Vm Firmware | All versions |
| Microsoft | Nccadsh100v5-Series Azure Vm Firmware | All versions |
| Microsoft | Ecedsv5-Series Azure Vm Firmware | All versions |
| Microsoft | Ecesv5-Series Azure Vm Firmware | All versions |
| Microsoft | Dcedsv5-Series Azure Vm Firmware | All versions |
| Microsoft | Dcesv5-Series Azure Vm Firmware | All versions |
| Microsoft | Ecadsv5-Series Azure Vm Firmware | All versions |
| Microsoft | Ecasv5-Series Azure Vm Firmware | All versions |
| Microsoft | Dcadsv5-Series Azure Vm Firmware | All versions |
| Microsoft | Dcasv5-Series Azure Vm Firmware | All versions |