Summary
Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires the attacker to be an administrator of the web application. As is best practice, regular validation and audits of administrative groups should be conducted.
What actions do customers need to take to protect themselves from this vulnerability?
Customers need to update their Defender for IoT software to version 24.1.3 or above. For more information, see OT monitoring software versions.
Security updates
24.1.3 — https://learn.microsoft.com/en-us/azure/defender-for-iot/organizations/release-notes#versions-241x
Vulnerabilities 1
-
High 7.2
Microsoft Defender for IoT Remote Code Execution Vulnerability
Microsoft Defender for IoT Remote Code Execution Vulnerability
Revision history
-
#2
Added FAQ information. This is an informational change only.
-
#1
Information published.
References
-
CVE-2024-21322 Microsoft Defender for IoT Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21322
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss