CVE-2024-43468

Published Oct 8, 2024

Last updated 5 months ago

Microsoft

SCCM

Overview

AI description

Automated description summarized from trusted sources.

CVE-2024-43468 is a SQL injection vulnerability affecting Microsoft Configuration Manager (SCCM). It allows an unauthenticated attacker with network access to a Management Point to execute arbitrary SQL queries on the site database. The vulnerability stems from the lack of proper sanitization of externally influenced input when constructing SQL commands. Successful exploitation grants the attacker unauthorized access to the SQL server database with the same privileges as the SCCM process, potentially leading to remote code execution, malware deployment, credential theft, and lateral movement within the network.

Description: Microsoft Configuration Manager Remote Code Execution Vulnerability
Source: secure@microsoft.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

secure@microsoft.com: CWE-89
nvd@nist.gov: NVD-CWE-noinfo

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 14

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:configuration_manager:2303:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2D631A6F-47B8-439B-8BC1-37A4208AAA43"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:configuration_manager:2309:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BE12B253-02C8-4B72-B1F9-51E4D6CC9BF0"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:configuration_manager:2403:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DBD2CA89-CFB1-469A-8905-AC5325D34109"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.