CVE-2024-38063criticalCWE-191

CVE-2024-38063: fallo crítico en Microsoft Windows 10 Version 1507

Windows TCP/IP Remote Code Execution Vulnerability

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Windows Server+ Monitorear Windows

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

78Vexday Risk Score

Haz seguimiento. Ella tiene alerta oficial del gobierno de Brasil y tiene prueba de concepto pública.

ssvc Attendcvss 9.8epss 74%
de la publicación al arma2 días
Publicada en NVD13 ago
1ª PoC+2d
Alerta oficial en Brasil

El gobierno federal de Brasil publicó una alerta, recomendación o boletín que cita esta vulnerabilidad.

Fuente: CTIR Gov (GSI) y CISC Gov.br, bajo licencia CC BY-ND 3.0.
Windows TCP/IP Remote Code Execution Vulnerability
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Productos afectados
Microsoft · Windows 10 Version 1507Microsoft · Windows 10 Version 1607Microsoft · Windows 10 Version 1809Microsoft · Windows 10 Version 21H2Microsoft · Windows 10 Version 22H2Microsoft · Windows 11 version 21H2Microsoft · Windows 11 version 22H2Microsoft · Windows 11 version 22H3Microsoft · Windows 11 Version 23H2Microsoft · Windows 11 Version 24H2Microsoft · Windows Server 2008 R2 Service Pack 1Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)Microsoft · Windows Server 2008 Service Pack 2Microsoft · Windows Server 2008 Service Pack 2Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)Microsoft · Windows Server 2012Microsoft · Windows Server 2012 R2Microsoft · Windows Server 2012 R2 (Server Core installation)Microsoft · Windows Server 2012 (Server Core installation)Microsoft · Windows Server 2016Microsoft · Windows Server 2016 (Server Core installation)Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server 2022Microsoft · Windows Server 2022, 23H2 Edition (Server Core installation)
PoCs públicas encontradas — 31
githubgithub.com/ynwarcs/CVE-2024-38063★ 695githubgithub.com/Sachinart/CVE-2024-38063-poc★ 87githubgithub.com/ThemeHackers/CVE-2024-38063★ 43githubgithub.com/patchpoint/CVE-2024-38063★ 20githubgithub.com/diegoalbuquerque/CVE-2024-38063★ 13githubgithub.com/KernelKraze/CVE-2024-38063_PoC★ 9githubgithub.com/zenzue/CVE-2024-38063-POC★ 7githubgithub.com/PumpkinBridge/Windows-CVE-2024-38063★ 4githubgithub.com/thanawee321/CVE-2024-38063★ 3githubgithub.com/Dragkob/CVE-2024-38063★ 3githubgithub.com/AdminPentester/CVE-2024-38063-★ 2githubgithub.com/Th3Tr1ckst3r/CVE-2024-38063★ 2githubgithub.com/AvidanMaatuk/CVE-2024-38063★ 1githubgithub.com/AliHj98/cve-2024-38063-Anonyvader★ 1githubgithub.com/jip-0-0-0-0-0/CVE-2024-38063-scanner★ 1githubgithub.com/becrevex/CVE-2024-38063★ 1githubgithub.com/brownpanda29/Cve-2024-38063★ 1githubgithub.com/Faizan-Khanx/CVE-2024-38063★ 1githubgithub.com/RohitMalik7/cve-2024-38063-detection-mitigation-system★ 0githubgithub.com/p33d/cve-2024-38063★ 0githubgithub.com/dweger-scripts/CVE-2024-38063-Remediation★ 0githubgithub.com/almogopp/Disable-IPv6-CVE-2024-38063-Fix★ 0githubgithub.com/ps-interactive/cve-2024-38063★ 0githubgithub.com/FrancescoDiSalesGithub/quick-fix-cve-2024-38063★ 0githubgithub.com/ArenaldyP/CVE-2024-38063-Medium★ 0githubgithub.com/idkwastaken/CVE-2024-38063★ 0githubgithub.com/fredagsguf/Windows-CVE-2024-38063★ 0githubgithub.com/Skac44/CVE-2024-38063★ 0githubgithub.com/thealice01/CVE-2024-38063★ 0githubgithub.com/arrhenius975/CVE-2024-38063-Exploit-Refactoring★ 0githubgithub.com/SALMA-ESSAOUD/CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis★ 0
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Microsoft Windows 10 Version 1507

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-34527HIGHWindows Print Spooler Remote Code Execution VulnerabilityEPSS 99.8%KEVCVE-2023-36884HIGHWindows Search Remote Code Execution VulnerabilityEPSS 99.4%KEVCVE-2024-21412HIGHInternet Shortcut Files Security Feature Bypass VulnerabilityEPSS 99.4%KEVCVE-2022-30190HIGHMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityEPSS 98.5%KEVCVE-2021-40444HIGHMicrosoft MSHTML Remote Code Execution VulnerabilityEPSS 97.8%KEVCVE-2023-36025HIGHWindows SmartScreen Security Feature Bypass VulnerabilityEPSS 88.2%KEV