Skip to content
OpenAdvisories
High MSRC-CVE-2024-49080 1 CVE

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

Published Dec 10, 2024 · Updated Dec 10, 2024

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.

How could an attacker exploit this vulnerability?
An attacker could exploit this vulnerability by tricking a user into sending a request to a malicious server. This could result in the server returning malicious data that might cause arbitrary code execution on the user's system.

Security updates
10.0.17763.6659 — https://support.microsoft.com/help/5048661
10.0.20348.2966 — https://support.microsoft.com/help/5048654
10.0.20348.2908 — https://support.microsoft.com/help/5048800
10.0.19044.5247 — https://support.microsoft.com/help/5048652
10.0.22621.4602 — https://support.microsoft.com/help/5048685
10.0.26100.2605 — https://support.microsoft.com/help/5048667
10.0.26100.2528 — https://support.microsoft.com/help/5048794
10.0.25398.1308 — https://support.microsoft.com/help/5048653
10.0.10240.20857 — https://support.microsoft.com/help/5048703
10.0.14393.7606 — https://support.microsoft.com/help/5048671
6.0.6003.23016 — https://support.microsoft.com/help/5048710
6.0.6003.23016 — https://support.microsoft.com/help/5048744
6.1.7601.27467 — https://support.microsoft.com/help/5048695
6.1.7601.27467 — https://support.microsoft.com/help/5048676
6.2.9200.25222 — https://support.microsoft.com/help/5048699
6.3.9600.22318 — https://support.microsoft.com/help/5048735

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References