CVE-2025-49707: Microsoft DCADSV5-Series Azure Vm Firmware

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally.

Affected products

• Microsoft DCADSV5-Series Azure Vm Firmware: affected versions not specified
• Microsoft DCASV5-Series Azure Vm Firmware: affected versions not specified
• Microsoft DCEDSV5-Series Azure Vm Firmware: affected versions not specified
• Microsoft DCESV5-Series Azure Vm Firmware: affected versions not specified
• Microsoft DCESV6-Series Azure Vm Firmware: affected versions not specified
• Microsoft ECADSV5-Series Azure Vm Firmware: affected versions not specified
• Microsoft ECASV5-Series Azure Vm Firmware: affected versions not specified
• Microsoft ECEDSV5-Series Azure Vm Firmware: affected versions not specified
• Microsoft ECESV5-Series Azure Vm Firmware: affected versions not specified
• Microsoft ECESV6-Series Azure Vm Firmware: affected versions not specified
• Microsoft NCCADSH100V5-Series Azure Vm Firmware: affected versions not specified

Published 2025-08-12. Last modified 2026-06-17.