CVE-2024-43572

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2024-10-08

Last updated on: 2025-10-30

Assigner: Microsoft Corporation

Description

Microsoft Management Console Remote Code Execution Vulnerability

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2024-10-08

Last Modified

2025-10-30

Generated

2026-10-16

AI Q&A

2024-10-25

EPSS Evaluated

2026-10-14

NVD

CVE-2024-43572

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_10_1507	to 10.0.10240.20796 (exc)
microsoft	windows_10_1507	to 10.0.10240.20796 (exc)
microsoft	windows_10_1607	to 10.0.14393.7428 (exc)
microsoft	windows_10_1607	to 10.0.14393.7428 (exc)
microsoft	windows_10_1809	to 10.0.17763.6414 (exc)
microsoft	windows_10_21h2	to 10.0.19044.5011 (exc)
microsoft	windows_10_21h2	to 10.0.19044.5011 (exc)
microsoft	windows_10_21h2	to 10.0.19044.5011 (exc)
microsoft	windows_10_22h2	to 10.0.19045.5011 (exc)
microsoft	windows_10_22h2	to 10.0.19045.5011 (exc)
microsoft	windows_10_22h2	to 10.0.19045.5011 (exc)
microsoft	windows_11_21h2	to 10.0.22000.3260 (exc)
microsoft	windows_11_22h2	to 10.0.22621.4317 (exc)
microsoft	windows_11_23h2	to 10.0.22631.4317 (exc)
microsoft	windows_11_23h2	to 10.0.22631.4317 (exc)
microsoft	windows_11_24h2	to 10.0.26100.2033 (exc)
microsoft	windows_server_2008	*
microsoft	windows_server_2008	*
microsoft	windows_server_2008	r2
microsoft	windows_server_2012	*
microsoft	windows_server_2012	r2
microsoft	windows_server_2016	to 10.0.14393.7428 (exc)
microsoft	windows_server_2019	to 10.0.17763.6414 (exc)
microsoft	windows_server_2022	to 10.0.20348.2762 (exc)
microsoft	windows_server_2022_23h2	to 10.0.25398.1189 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-707	The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.
CWE-NVD-CWE-noinfo

Attack-Flow Graph

Executive Summary

This vulnerability, identified as CVE-2024-43572, is a security issue in the Microsoft Management Console that allows remote code execution. This means that an attacker could potentially run harmful code on your system from a distance, which could compromise your system's security.

Impact Analysis

If you are using affected Microsoft products, this vulnerability could allow attackers to take control of your system, steal sensitive information, or disrupt your operations. It's important to apply security updates to protect against this risk.

Compliance Impact

This vulnerability could put your organization at risk of non-compliance with regulations like GDPR and HIPAA, which require protecting sensitive data. If an attacker exploits this vulnerability and accesses personal or health information, it could lead to legal penalties and damage to your reputation.

Mitigation Strategies

You should apply the relevant patches provided by Microsoft. You can find more information and resources at the following link: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43572.

Hi! I’m here to help you understand CVE-2024-43572. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70