Skip to content
OpenAdvisories
Critical MSRC-CVE-2024-43625 1 CVE

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

Published Nov 12, 2024 · Updated Nov 12, 2024

Summary

Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?
In this case, a successful attack could be performed from a low privilege Hyper-V guest. The attacker could traverse the guest's security boundary to execute code on the Hyper-V host execution environment.

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to gather information specific to the environment and take additional actions prior to exploitation to prepare the target environment.

Is SCVMM (System Center Virtual Machine Manager) affected by this vulnerability?
The vulnerability is confined to the VmSwitch component within Hyper-V.
SCVMM (System Center Virtual Machine Manager) primarily functions as an orchestration layer and is not exploitable by this vulnerability itself.

How could an attacker exploit this vulnerability?
Successful exploitation of this vulnerability requires an attacker to send a specific series of networking requests to the VMswitch driver triggering a use after free vulnerability in the Hyper-V host which grants host privileges that could be used to perform arbitrary code execution.

Security updates
10.0.20348.2849 — https://support.microsoft.com/help/5046616
10.0.20348.2819 — https://support.microsoft.com/help/5046698
10.0.22621.4460 — https://support.microsoft.com/help/5046633
10.0.25398.1251 — https://support.microsoft.com/help/5046618
10.0.26100.2314 — https://support.microsoft.com/help/5046617
10.0.26100.2240 — https://support.microsoft.com/help/5046696

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References