Microsoft Management Console Remote Code Execution Vulnerability
CVE-2024-43572 is a remote code execution vulnerability in Microsoft Management Console (rated Important, CVSS 7.8). Microsoft reports that it is being exploited.
Exploited1 version
Facts
- Microsoft id
CVE-2024-43572- Status
- Exploited
- Products
- Microsoft Management Console
- Severity
- Important
- Impact
- Remote Code Execution
- CVSS
- 7.8
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
- Exploited
- Yes
- Publicly disclosed
- Yes
- Exploitability
- Exploitation Detected
- Customer action required
- Yes
- Release
- 2024-Oct
- Assigned by
- Microsoft
- Weakness
- CWE-707: Improper Neutralization
- MSRC revision
- 1.0
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2024-10-08:
Information published.
Microsoft says
What does the security update provide to mitigate the risks associated with this vulnerability?
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
As first seen: Exploited
- Status
- Exploited
Seen by us · Microsoft's timestamp · Microsoft's page