services / Azure / Network Interface

A network interface (NIC) is the virtual networking component that connects a VM to a subnet, carrying its private/public IP configuration and network security group association.

Carries the live IP configuration and security-group binding for a single VM's network attachment; write access can redirect its traffic or strip its security controls. Rated HIGH rather than CRITICAL because impact is scoped to the traffic/VM attached to this specific interface rather than whole-network segmentation.

Microsoft.​Network/​networkInterfaces/​write

Updating an existing NIC's IP configuration or NSG association can move its traffic to attacker-controlled infrastructure or disable the security-group protections attached to it.

Risks

1. Network destruction (HIGH)
2. Network movement (BOOST)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links