CVE-2024-38063

Published Aug 13, 2024

Last updated 8 months ago

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2024-38063 is a vulnerability in the Windows TCP/IP stack, specifically impacting the IPv6 subsystem. Exploitation is achieved through the transmission of specially crafted IPv6 network packets to a vulnerable system. Successful exploitation allows for remote code execution (RCE), enabling an attacker to run arbitrary code on the targeted machine. This vulnerability affects Windows systems with IPv6 enabled and was addressed by Microsoft with a patch released on August 13, 2024. Exploitation can occur remotely, meaning an attacker does not need prior access to the target system.

Description: Windows TCP/IP Remote Code Execution Vulnerability
Source: secure@microsoft.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo
secure@microsoft.com: CWE-191

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7E76B107-D977-41BE-8E5C-6A9B52C6EBDE",
            "versionEndExcluding": "10.0.10240.20751"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6808A3F0-AC0E-4825-A582-5D7841F4870F",
            "versionEndExcluding": "10.0.14393.7259"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C0893DB0-24BA-41A1-907E-8B6F66741A0E",
            "versionEndExcluding": "10.0.17763.6189"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8D75E5B4-14B7-4D0F-96B5-2B9C270B7F98",
            "versionEndExcluding": "10.0.19044.4780"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3F9C3ED0-C639-42B9-8512-5CAD50B7095B",
            "versionEndExcluding": "10.0.19045.4780"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "66EC161E-9908-4511-933C-727D46A8271E",
            "versionEndExcluding": "10.0.22000.3147"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EE5B452D-B921-4E5F-9C79-360447CD3BF8",
            "versionEndExcluding": "10.0.22621.4037"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B56F0E20-88FD-4A42-B5DE-06A6D2FAC6FA",
            "versionEndExcluding": "10.0.22631.4037"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3C7E2433-4D16-40E5-973A-42F651779A47",
            "versionEndExcluding": "10.0.26100.1457"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "28824912-3E9D-4E1E-AE1F-F9700DB892C0",
            "versionEndExcluding": "6.2.9200.25031"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7CA31F69-6718-4968-8B0D-88728179F3CA",
            "versionEndExcluding": "10.0.14393.7259"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A2267317-26DF-4EB8-A7EA-EA467727DA71",
            "versionEndExcluding": "10.0.17763.6189"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8E3975C0-EA3C-4B85-94BC-43BA94474FCA",
            "versionEndExcluding": "10.0.20348.2655"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "094C36FE-9CCB-4148-AA0F-5727D6933768",
            "versionEndExcluding": "10.0.25398.1085"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]