H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2024-43572

Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.

Vulnerability
TypeVulnerability
External ID—
First seen2024-10-08
Last seen2024-10-08

Confidence

—

Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.

Labels

exploitedkev

CISA KEV context

Vendor / productMicrosoft Windows
Added2024-10-08
Due date2024-10-29
17 recorded

Relationships

mitigates
from Remediate CVE-2024-43572
Mitigation
related-to
to Blind SQL Injection
Technique
related-to
to Data Interchange Protocol Manipulation
Technique
related-to
to Embedding NULL Bytes
Technique
related-to
to Exploiting Multiple Input Interpretation Layers
Technique
related-to
to Generic Cross-Browser Cross-Domain Theft
Technique
related-to
to Inter-component Protocol Manipulation
Technique
related-to
to Postfix, Null Terminate, and Backslash
Technique
related-to
to SOAP Manipulation
Technique
related-to
to Using Escaped Slashes in Alternate Encoding
Technique
related-to
to Using Leading 'Ghost' Character Sequences to Bypass Input Filters
Technique
related-to
to Using Slashes and URL Encoding Combined to Bypass Validation Logic
Technique
related-to
to Using Slashes in Alternate Encoding
Technique
related-to
to Web Services Protocol Manipulation
Technique
related-to
to XML Injection
Technique
related-to
to XPath Injection
Technique
related-to
to XQuery Injection
Technique
2 external

References

nvd
CVE-2024-43572
open
cwe
CWE-707
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance