Summary
Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
The attacker must inject themselves into the logical network path between the target and the resource requested by the victim to read or modify network communications. This is called a machine-in-the-middle (MITM) attack.
According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H) and major loss of integrity (I:H) but have no effect on availability (A:N). What does that mean for this vulnerability?
Exploiting this vulnerability allows an attacker to view highly sensitive resource information (C:H) and results in a total loss of protection for that data (I:H), but does not provide the capability to impact resource availability.
Security updates
10.0.17763.6414 — https://support.microsoft.com/help/5044277
10.0.20348.2762 — https://support.microsoft.com/help/5044281
10.0.22000.3260 — https://support.microsoft.com/help/5044280
10.0.19044.5011 — https://support.microsoft.com/help/5044273
10.0.22621.4317 — https://support.microsoft.com/help/5044285
10.0.25398.1189 — https://support.microsoft.com/help/5044288
10.0.26100.2033 — https://support.microsoft.com/help/5044284
10.0.10240.20796 — https://support.microsoft.com/help/5044286
10.0.14393.7428 — https://support.microsoft.com/help/5044293
6.2.9200.25118 — https://support.microsoft.com/help/5044342
6.3.9600.22221 — https://support.microsoft.com/help/5044343
Vulnerabilities 1
-
High 7.4
Windows Secure Channel Spoofing Vulnerability
Windows Secure Channel Spoofing Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2024-43550 Windows Secure Channel Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43550
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss