Skip to content
OpenAdvisories
High MSRC-CVE-2024-43550 1 CVE

Windows Secure Channel Spoofing Vulnerability

Published Oct 8, 2024 · Updated Oct 8, 2024

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
The attacker must inject themselves into the logical network path between the target and the resource requested by the victim to read or modify network communications. This is called a machine-in-the-middle (MITM) attack.

According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H) and major loss of integrity (I:H) but have no effect on availability (A:N). What does that mean for this vulnerability?
Exploiting this vulnerability allows an attacker to view highly sensitive resource information (C:H) and results in a total loss of protection for that data (I:H), but does not provide the capability to impact resource availability.

Security updates
10.0.17763.6414 — https://support.microsoft.com/help/5044277
10.0.20348.2762 — https://support.microsoft.com/help/5044281
10.0.22000.3260 — https://support.microsoft.com/help/5044280
10.0.19044.5011 — https://support.microsoft.com/help/5044273
10.0.22621.4317 — https://support.microsoft.com/help/5044285
10.0.25398.1189 — https://support.microsoft.com/help/5044288
10.0.26100.2033 — https://support.microsoft.com/help/5044284
10.0.10240.20796 — https://support.microsoft.com/help/5044286
10.0.14393.7428 — https://support.microsoft.com/help/5044293
6.2.9200.25118 — https://support.microsoft.com/help/5044342
6.3.9600.22221 — https://support.microsoft.com/help/5044343

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References