CVE-2019-1234

CVE Enrichment

CVSS: 7.5 HIGH
EPSS: 75.19%
EPSS Percentile: 99.51%
CISA KEV: Not listed

Description

A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability'.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: secure@microsoft.com
Published: 13-Nov-2019 02:15
Last Modified: 17-Jun-2026 09:28
EPSS Date: 2026-10-16
CWE: CWE-290

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:N /
                            I:H /
                            A:N

Affected Products / Versions

microsoft / azure_stack
Version / affected range: -
cpe:2.3:a:microsoft:azure_stack:-:*:*:*:*:*:*:*

References

Last enrichment sync: 18-Oct-2026 21:13
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

Earlier this year, Russian hackers on the darknet forum Dublikat discussed Azure Stack vulnerabilities documented in CVE-2019-1234 (Source: d25c98cc06300c5a8e3dcbd1a6ebf606). DarkOwl Details Darknet Tactics Targeting Cloud Platforms

CVE (1)

Malware (1)

Threat Actors (9)

MITRE ATT&CK (5)

Vendors (5)

Products (8)

Tools (2)

Industries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.