Skip to content
Sign in
7.9 High

CVE-2025-49707 Azure Virtual Machines Spoofing Vulnerability

Description

Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally.

CVSS 3.1 detail

Vector CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C

Exploitable with local access to the machine, with an administrator account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Local
Attack complexity
Low
Privileges required
High
Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
None

Affected products and versions

Product Affected versions Fixed in
DCasv5-series Azure VM Versions not published
DCadsv5-series Azure VM Versions not published
ECasv5-series Azure VM Versions not published
ECadsv5-series Azure VM Versions not published
DCesv5-series - Azure VM Versions not published
DCedsv5-series Azure VM Versions not published
ECesv5-series Azure VM Versions not published
ECedsv5-series Azure VM Versions not published
NCCadsH100v5-series Azure VM Versions not published
Show the 2 other branches
Product Affected versions Fixed in
DCesv6-series Azure VM Versions not published
Ecesv6-series Azure VM Versions not published

Other CVEs of DCasv5-series Azure VM

The 2 CVEs of DCasv5-series Azure VM →
CVE-2025-53781 Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to… 7.7 High
Track this CVE