CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2024-434689.8/CRITICALEPSS 81.0%CISA KEV
2024-10-08

Microsoft Configuration Manager Remote Code Execution Vulnerability (CVE-2024-43468) Security Advisory

[Affected Scope] All supported versions of Microsoft Configuration Manager (formerly SCCM)

[Impact] Unauthenticated remote attackers can execute arbitrary commands on the target server and backend database by sending specially crafted requests, leading to full system compromise

[Mitigation] Immediately apply the latest cumulative updates (KB) via the Configuration Manager console and restrict database access

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse