NTLM Hash Disclosure Spoofing Vulnerability
CVE-2024-43451 is a spoofing vulnerability in Windows NTLM (rated Important, CVSS 6.5). Microsoft reports that it is being exploited.
Exploited1 version
Facts
- Microsoft id
CVE-2024-43451- Status
- Exploited
- Products
- Windows NTLM
- Severity
- Important
- Impact
- Spoofing
- CVSS
- 6.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C
- Exploited
- Yes
- Publicly disclosed
- Yes
- Exploitability
- Exploitation Detected
- Customer action required
- Yes
- Release
- 2024-Nov
- Assigned by
- Microsoft
- Weakness
- CWE-73: External Control of File Name or Path
- MSRC revision
- 2.0
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2024-11-12:
Information published.
- Revision 2.0, 2024-12-12:
In the Security Update table, removed Windows Server 2012 and Windows Server 2012 (Server Core installation) as these Server versions are not affected by this…
Microsoft says
According to the CVSS metric, successful exploitation of this vulnerability could lead to total loss of confidentiality (C:H)? What does that mean for this vulnerability?
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
As first seen: Exploited
- Status
- Exploited
Seen by us · Microsoft's timestamp · Microsoft's page