Test ID:	1.3.6.1.4.1.25623.1.0.814212
Category:	Windows
Title:	Azure IoT SDK Spoofing Vulnerability (Sep 2018) - Windows
Summary:	Azure IoT Device C SDK library is prone to a spoofing; vulnerability.
Description:	Summary: Azure IoT Device C SDK library is prone to a spoofing vulnerability. Vulnerability Insight: The flaw exists due to an error in how the HTTP transport library validates certificates. Vulnerability Impact: Successful exploitation will allow an attacker to impersonate a server used during the provisioning process. Affected Software/OS: Azure IoT C SDK Solution: Upgrade to Azure IoT C SDK 1.2.9 or later. Please see the references for more information. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-8479 BugTraq ID: 105323 http://www.securityfocus.com/bid/105323
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.