CVE-2019-0729

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-03-06 · updated 2026-06-17
Weakness: CWE-330

Description

An Elevation of Privilege vulnerability exists in the way Azure IoT Java SDK generates symmetric keys for encryption, allowing an attacker to predict the randomness of the key, aka 'Azure IoT Java SDK Elevation of Privilege Vulnerability'.

Affected products

Microsoft Java SDK for Azure IoT: all versions
Microsoft Java SDK for Azure IoT: all versions

References

http://www.securityfocus.com/bid/106966
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0729
http://www.securityfocus.com/bid/106966
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0729

Get alerted when CVE-2019-0729 or the next vulnerability affects your stack