CERT-In warns of critical Microsoft Defender for IoT vulnerabilities
The Indian Computer Emergency Response Team (CERT-In) has issued a critical vulnerability note (CIVN-2024-0129) regarding Microsoft Defender for IoT, a cybersecurity product aimed at safeguarding Internet of Things (IoT) devices. The warning highlights multiple vulnerabilities within the Defender for IoT software, posing a significant risk of remote attacks.
The vulnerabilities identified by CERT-In fall into two primary categories: Remote Code Execution (RCE) and Elevation of Privilege. RCE vulnerabilities enable attackers to upload malicious files to targeted systems, potentially executing code and gaining remote control. Elevation of Privilege vulnerabilities allow unauthorised access to sensitive information, including network credentials.
Who is Affected?.
This vulnerability note specifically impacts users of Microsoft Defender for IoT. It's crucial to clarify that not all Microsoft Defender products are affected. Organizations and individuals utilizing Microsoft Defender for IoT are urged to prioritize immediate implementation of the provided update.
CERT-In classifies these vulnerabilities as critical, emphasizing the urgency for users to take prompt action. Microsoft has released security updates to address these issues. Here's how users can protect themselves:
By adhering to these recommended actions and staying vigilant, users can substantially reduce their susceptibility to exploitation through the critical vulnerabilities identified in Microsoft Defender for IoT. It's imperative for organizations and individuals to prioritize cybersecurity measures to safeguard their IoT infrastructure effectively.
Read more on tech.hindustantimes.com
