Summary
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?
In this situation a successful exploit could let attacker gain access to the network where the agent is installed which could lead to accessing to other assets in that network.
How could an attacker exploit this vulnerability?
An attacker who has performed the exploit successfully would be able to gain access to the installed agent and could perform remote code execution.
According to the CVSS metric, the attack complexity is high (AC:H) and the privileges required is high (PR:H). What does this mean for this vulnerability?
For a successful exploitation, the attacker would need some key information like ARMID and UUID of the installed agent as pre-requisite.
Security updates
3.0.430 — https://learn.microsoft.com/en-us/azure/storage-mover/release-notes
Vulnerabilities 1
-
High 8.0
Azure Storage Mover Remote Code Execution Vulnerability
Azure Storage Mover Remote Code Execution Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2024-20676 Azure Storage Mover Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20676
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss