Skip to main content
All vulnerabilities
CVE-2024-43572

Microsoft Windows Management Console Remote Code Execution Vulnerability

MicrosoftWindows

Added to KEV catalog
8 October 2024
Federal remediation due date
29 October 2024
Weakness classification (CWE)
CWE-707

CISA Description

Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://msrc.microsoft.com/update-guide/advisory/CVE-2024-43572 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43572

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services