services / Azure / Virtual Hub

A Virtual Hub is the routing core of an Azure Virtual WAN, terminating branch/VNet connections and holding the route tables that steer traffic across the WAN.

The hub is the central routing point of a Virtual WAN; controlling its routing redirects or intercepts traffic across every connected VNet and branch.

Microsoft.​Network/​virtualHubs/​inboundRoutes/​action

Returns the routes learnt from a Virtual WAN connection, disclosing WAN topology and advertised prefixes usable to plan lateral movement.

Risks

1. Network discovery (LOW)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links