CVE-2018-8479: Microsoft C Software Development Kit

Medium severity, CVSS 5.6. EPSS: 2.1% chance of exploitation in the next 30 days.

A spoofing vulnerability exists for the Azure IoT Device Provisioning for the C SDK library using the HTTP protocol on Windows platform, aka "Azure IoT SDK Spoofing Vulnerability." This affects C SDK.

Affected products

• Microsoft C Software Development Kit: any version
• Microsoft Java Software Development Kit: any version

Published 2018-09-13. Last modified 2026-06-17.