VDB
CVE-2024-38086
CVE-2024-38086
PUBLISHED
Es besteht eine Schwachstelle in Microsoft Azure Kinect SDK. Ein lokaler Angreifer mit physischem Zugriff auf den Zielcomputer kann diese Schwachstelle ausnutzen, um durch Einstecken eines bösartigen USB-Laufwerks beliebigen Code auszuführen.
EPSS 1.14% · 78.7th percentile
Risk Scores
EPSS Score
1.14%
78.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Azure CycleCloud 8.1.0 | |
| Microsoft | Microsoft Azure Kinect SDK | |
| Microsoft | Microsoft Azure CycleCloud 8.1.1 | |
| Microsoft | Microsoft Azure CycleCloud 7.9.6 | |
| Microsoft | Microsoft Azure CycleCloud 7.9.5 | |
| Microsoft | Microsoft Azure CycleCloud 8.2.0 | |
| Microsoft | Microsoft Azure CycleCloud 7.9.4 | |
| Microsoft | Microsoft Azure CycleCloud 8.3.0 | |
| Microsoft | Microsoft Azure CycleCloud 7.9.2 | |
| Microsoft | Microsoft Azure CycleCloud 7.9.7 | |
| Microsoft | Microsoft Windows Azure Network Watcher VM Extension for Windows | |
| Microsoft | Microsoft Azure CycleCloud 7.9.1 | |
| Microsoft | Microsoft Azure CycleCloud 8.0.1 | |
| Microsoft | Microsoft Azure CycleCloud 8.6.0 | |
| Microsoft | Microsoft Azure CycleCloud 7.9.11 | |
| Microsoft | Microsoft Azure DevOps Server 2022.1 | |
| Microsoft | Microsoft Azure CycleCloud 8.4.1 | |
| Microsoft | Microsoft Azure CycleCloud 7.9.3 | |
| Microsoft | Microsoft Azure CycleCloud 8.0.0 | |
| Microsoft | Microsoft Azure CycleCloud 7.9.10 |
…and 9 more
Timeline
- Jul 9, 2024 CVE Published
- Jul 10, 2024 EPSS Score
- Aug 1, 2024 EPSS Score
- Aug 23, 2024 EPSS Score
- Sep 14, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 6, 2024 EPSS Score
- Oct 28, 2024 EPSS Score
- Nov 19, 2024 EPSS Score
- Dec 12, 2024 EPSS Score
- Jan 25, 2025 EPSS Score
- Feb 16, 2025 EPSS Score