CVE-2024-49112

Published Dec 12, 2024

Last updated 3 days ago

Insights

Analysis from the Intruder Security Team

Published Jan 2, 2025

SafeBreach published a writeup on January 1st which exploits a denial of service condition and attributes it to this CVE, but the original researcher that reported this bug to Microsoft disagrees

Though the full PoC being published does mean that attacks are more likely, the exploit for CVE-2024-49112 is not yet in the public domain, and so only highly resourced attack groups are likely to be able to exploit the RCE

Overview

Description: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Source: secure@microsoft.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

secure@microsoft.com: CWE-190
nvd@nist.gov: NVD-CWE-noinfo

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 1

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "10F567C3-3739-4F3D-B9E0-D2725D09CE0D",
            "versionEndExcluding": "10.0.10240.20857"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "04D1F48B-C323-4062-B5E1-9700ADBB153C",
            "versionEndExcluding": "10.0.10240.20857"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "29B44B5E-3D35-4A5B-A916-6E70923FAB7C",
            "versionEndExcluding": "10.0.14393.7606"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "77EAFFB9-3053-4197-B52D-69F4F86C8FBA",
            "versionEndExcluding": "10.0.14393.7606"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "5FA7C375-3A7C-4F34-B6E7-82C187B4F7AF",
            "versionEndExcluding": "10.0.17763.6659"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "vulnerable": true,
            "matchCriteriaId": "576F141F-C874-4817-961A-2C4D2AB3DEA4",
            "versionEndExcluding": "10.0.17763.6659"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F814C24B-FA54-4B97-8387-6EE9AC269178",
            "versionEndExcluding": "10.0.19044.5247"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6CF40E59-FC32-4047-8A63-EE0819A32962",
            "versionEndExcluding": "10.0.19045.5247"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0C3B0836-B782-4C1A-B0D1-B6111CBC8DED",
            "versionEndExcluding": "10.0.22621.4602"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "594D3E33-9ADE-47EF-8032-A5EDC948F92B",
            "versionEndExcluding": "10.0.26100.2605"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "vulnerable": true,
            "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "361D1B8E-6E56-4B5F-85D1-D47114A10A81",
            "versionEndExcluding": "10.0.14393.7606"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "11517523-F822-45BC-B347-C65F00B45202",
            "versionEndExcluding": "10.0.17763.6659"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AECABB2C-DACB-4BBD-8739-DDB00285B0A7",
            "versionEndExcluding": "10.0.20348.2966"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "37977CFB-B259-49B8-B0C5-85ECB40FE429",
            "versionEndExcluding": "10.0.25398.1308"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E013EA3C-6F18-4CA4-AF5B-664F869B9A6D",
            "versionEndExcluding": "10.0.26100.2605"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]