Microsoft Windows Management Console Remote Code Execution Vulnerability
Microsoft — Windows
- Added to KEV catalog
- 8 October 2024
- Federal remediation due date
- 29 October 2024
- Weakness classification (CWE)
- CWE-707
CISA Description
Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes
https://msrc.microsoft.com/update-guide/advisory/CVE-2024-43572 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43572
More Microsoft Vulnerabilities
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
Microsoft Windows Buffer Overflow Vulnerability
Microsoft DirectX NULL Byte Overwrite Vulnerability
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer Use-After-Free Vulnerability
Is this vulnerability present in your environment?
CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.
Explore VAPT Services