CVE-2024-38089: falha crítica em Microsoft Defender for IoT
Microsoft Defender for IoT Elevation of Privilege Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.1epss 1.2%
Microsoft Defender for IoT Elevation of Privilege Vulnerability
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Microsoft Defender for IoTCVEs relacionadas — Microsoft Defender for IoT
No mesmo produto, das mais perigosas para as menos.
CVE-2021-42311CRITICALMicrosoft Defender for IoT Remote Code Execution VulnerabilityEPSS 4.4%CVE-2021-42313CRITICALMicrosoft Defender for IoT Remote Code Execution VulnerabilityEPSS 4.1%CVE-2024-29053HIGHMicrosoft Defender for IoT Remote Code Execution VulnerabilityEPSS 3.2%CVE-2024-21323HIGHMicrosoft Defender for IoT Remote Code Execution VulnerabilityEPSS 3.2%CVE-2021-43888HIGHMicrosoft Defender for IoT Information Disclosure VulnerabilityEPSS 3.2%CVE-2024-21322HIGHMicrosoft Defender for IoT Remote Code Execution VulnerabilityEPSS 3.1%