CVE-2024-38259: Microsoft Management Console Remote Code Execution Vulnerability

CVE-2024-38259 PUBLISHED CVSS 8.8 HIGH

Microsoft Management Console Remote Code Execution Vulnerability

Reported by microsoft · Published September 10, 2024

Microsoft Management Console Remote Code Execution Vulnerability

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

CVSS 3.1

8.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Vendor	Product	Versions
Microsoft	Windows 11 version 21H2	10.0.0
Microsoft	Windows 11 version 22H2	10.0.22621.0
Microsoft	Windows 11 version 22H3	10.0.22631.0
Microsoft	Windows 11 Version 23H2	10.0.22631.0
Microsoft	Windows 11 Version 24H2	10.0.26100.0
Microsoft	Windows Server 2022	10.0.20348.0
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	10.0.25398.0
Microsoft	Windows 11 version 22H3	10.0.22631.0
Microsoft	Windows 11 Version 24H2	10.0.26100.0
Microsoft	Windows 11 version 22H2	10.0.22621.0
microsoft	windows_11_21H2	10.0.0
Microsoft	Windows 11 Version 23H2	10.0.22631.0
microsoft	windows_server_2022	10.0.20348.0
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	10.0.25398.0
microsoft	windows_11_24H2	10.0.26100.0
microsoft	windows_11_23H2	10.0.22631.0
microsoft	windows_server_23h2	10.0.25398.0
Microsoft	Windows Server 2022	10.0.20348.0
Microsoft	Windows 11 version 21H2	10.0.0
microsoft	windows_11_22H2	10.0.22621.0

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-38259
vulnetix vdb fixes CVE-2024-38259

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-38259/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart