Summary
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to gather information specific to the environment and take additional actions prior to exploitation to prepare the target environment.
According to the CVSS metric, the Attack Vector is Physical (AV:P). What does that mean for this vulnerability?
An attacker needs physical access to the target computer to plug in a malicious USB drive.
Security updates
1.4.2 — https://github.com/microsoft/Azure-Kinect-Sensor-SDK/releases/tag/v1.4.2
Vulnerabilities 1
-
Medium 6.4
Azure Kinect SDK Remote Code Execution Vulnerability
Azure Kinect SDK Remote Code Execution Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2024-38086 Azure Kinect SDK Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38086
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss