CVE-2024-30010

Published: May 14, 2024Modified: Jan 8, 2025

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Windows Hyper-V Remote Code Execution Vulnerability

Affected (6)

Products: Microsoft: Windows Server 2012, Windows Server 2016, Windows Server 2019, Windows Server 2022, Windows Server 2022 23h2

5 products

Windows Server 2012

Windows Server 2016

Windows Server 2019

Windows Server 2022

Windows Server 2022 23h2

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows Server 2012	All versions
Microsoft Windows Server 2012	Version r2
Microsoft Windows Server 2016	Before 10.0.14393.6981
Microsoft Windows Server 2019	Before 10.0.17763.5820
Microsoft Windows Server 2022	Before 10.0.20348.2461
Microsoft Windows Server 2022 23h2	Before 10.0.25398.887

Related CWEs

Relative Path Traversal

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

References (2)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30010

Source: secure@microsoft.com

Vendor Advisory

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30010

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.