CVE-2024-43451

Published Nov 12, 2024

Last updated 4 months ago

Microsoft

Windows

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2024-43451 is a spoofing vulnerability affecting Microsoft Windows and Windows Server. It enables attackers to obtain a user's NTLMv2 hash, which contains authentication credentials, through a "pass-the-hash" technique. This allows attackers to potentially impersonate the user and gain unauthorized access. The vulnerability involves creating a malicious URL file. When a user interacts with this file, such as right-clicking, deleting, or moving it, a connection to the attacker's server is established, leading to the leak of the NTLMv2 hash. Exploitation of this vulnerability requires minimal user interaction and was reportedly used in attacks targeting Ukrainian entities. The vulnerability was discovered in June 2024 and a patch was released by Microsoft on November 12, 2024. Users are strongly encouraged to apply the patch to mitigate the risk associated with CVE-2024-43451.

Description: NTLM Hash Disclosure Spoofing Vulnerability
Source: secure@microsoft.com
NVD status: Analyzed

Insights

Analysis from the Intruder Security Team

Published Nov 14, 2024

Although the exploit targets functionality predominantly used by deprecated browser Internet Explorer, exploitation is also possible if Microsoft Edge allows opening pages in IE mode. In this mode, Microsoft Edge makes use of the vulnerable MSHTML platform, but only when group policy is specifically configured to allow it.

Risk scores

CVSS 3.1

Type: Primary
Base score: 6.5
Impact score: 3.6
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Severity: MEDIUM

Known exploits

Data from CISA

Vulnerability name: Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
Exploit added on: Nov 12, 2024
Exploit action due: Dec 3, 2024
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo
secure@microsoft.com: CWE-73

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "94D57126-EC8D-4898-A5FE-D7EB6463B634",
            "versionEndExcluding": "10.0.10240.20826"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "54AA8A1F-0EAD-406A-A4AF-B86C316D1089",
            "versionEndExcluding": "10.0.10240.20826"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "86F8F1B2-C206-4CD6-83C6-C450329CEE10",
            "versionEndExcluding": "10.0.14393.7515"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "FCBE6103-075E-4841-836D-4E0D630E99FF",
            "versionEndExcluding": "10.0.14393.7515"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "81C732A1-CC0F-4633-B00D-473869E77DB9",
            "versionEndExcluding": "10.0.17763.6532"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "AF9C20B8-CB5E-46C9-B041-D6A42C26703B",
            "versionEndExcluding": "10.0.17763.6532"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "vulnerable": true,
            "matchCriteriaId": "71AD0B79-C3EF-4E13-AB04-D5FAEABA6954",
            "versionEndExcluding": "10.0.19044.5131"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "B35413A3-DE3B-4E35-AB48-C6D5D138AC07",
            "versionEndExcluding": "10.0.19044.5131"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "D0558F5F-A561-41E9-9242-7F4A5D924479",
            "versionEndExcluding": "10.0.19044.5131"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "vulnerable": true,
            "matchCriteriaId": "EA243DE7-EDB1-43DA-AD7E-541843DECB58",
            "versionEndExcluding": "10.0.19045.5131"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "5D428E06-FC7C-4151-9582-D66D05D7AFE6",
            "versionEndExcluding": "10.0.19045.5131"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "FB49C811-F4D7-46EB-9ED6-50CB3EAAAD90",
            "versionEndExcluding": "10.0.19045.5131"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
            "vulnerable": true,
            "matchCriteriaId": "04BC0915-6F14-4D7A-951F-83CBAB47C3C4",
            "versionEndExcluding": "10.0.22621.4460"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "8A16CFCB-D002-4F63-B568-9D14ACE88E94",
            "versionEndExcluding": "10.0.22621.4460"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
            "vulnerable": true,
            "matchCriteriaId": "B8FE14E5-7226-43CA-A57E-A81636185AD4",
            "versionEndExcluding": "10.0.22631.4460"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "97507261-3969-4EBF-BCED-93FBADCBB6DC",
            "versionEndExcluding": "10.0.22631.4460"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "vulnerable": true,
            "matchCriteriaId": "D32C04CA-E5BE-47CA-AF79-B39859288531",
            "versionEndExcluding": "10.0.26100.2314"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "40A6B92E-21C6-4BDD-BA57-DC227FF0F998",
            "versionEndExcluding": "10.0.26100.2314"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "82E3AC46-9D0D-4381-93EE-FE87C212040A",
            "versionEndExcluding": "10.0.14393.7515"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A43E1F6C-B2A7-4DEC-B4EC-04153746C42B",
            "versionEndExcluding": "10.0.17763.6532"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "38D9CE84-B85F-42B0-959D-A390427A1641",
            "versionEndExcluding": "10.0.20348.2849"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A549BD98-3DE2-4EF3-A579-12AFCB764975",
            "versionEndExcluding": "10.0.25398.1251"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4F17FD7F-254D-4EE6-9D22-468E76D9B054",
            "versionEndExcluding": "10.0.26100.2314"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]