← back
CVE-2024-43572

Microsoft Management Console Remote Code Execution Vulnerability

CVSS 7.8 HIGHEPSS 61.0%● KEVCWE-707
In short

A flaw in Microsoft Management Console allows an attacker to run malicious code on a system by tricking a user into opening a specially crafted file. This is dangerous because it gives attackers direct control over the affected computer.

Technical detail

CWE-707 vulnerability in MMC enables remote code execution through malicious serialized object manipulation. Attack vector requires user interaction (opening crafted file); exploitation grants attacker execution context with privileges of the logged-in user, potentially leading to complete system compromise.

Summary generated and translated by AI from the official description.
Microsoft Management Console Remote Code Execution Vulnerability
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →