VDB
BDU%3A2024-07944
BDU%3A2024-07944
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Уязвимость программного обеспечения управления ИТ-инфраструктурой Microsoft Configuration Manager, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | configuration_manager | 1.0.0 |
| Microsoft Corp | Microsoft Configuration Manager | |
| Microsoft | Microsoft Configuration Manager | 1.0.0 |
Timeline
- Oct 8, 2024 CVE Published
- Oct 8, 2024 PoC Published
- Oct 9, 2024 PoC Published
- Oct 9, 2024 PoC Published
- Jan 16, 2025 PoC Published
- Jan 16, 2025 PoC Published
- Jan 16, 2025 PoC Published
- Jan 17, 2025 PoC Published
- Jan 17, 2025 PoC Published
- Jan 17, 2025 PoC Published
- Jan 17, 2025 PoC Published
- Jan 17, 2025 PoC Published
References
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43468 url
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43468 advisory
- https://t.me/teamdarkarmy/2795 url
- https://www.securitycode.ru/company/blog/daydzhest-laboratorii-analiza-setevykh-ugroz-kod-bezopasnosti-za-mart-2025/ url