CVE-2024-38230

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

W

indows Standards-Based Storage Management Service Denial of Service Vulnerability

References

Link	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38230	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_server_2012:r2::::::x64:
	cpe:2.3:o:microsoft:windows_server_2016::::::::
	cpe:2.3:o:microsoft:windows_server_2019::::::::
	cpe:2.3:o:microsoft:windows_server_2022::::::::

History

17 Sep 2024, 16:56

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~6.5~~	v2 : unknown v3 : 7.5
CWE		NVD-CWE-noinfo
Summary		(es) Vulnerabilidad de denegación de servicio del servicio de administración de almacenamiento basado en estándares de Windows
First Time		Microsoft windows Server 2012 Microsoft windows Server 2019 Microsoft windows Server 2022 Microsoft windows Server 2016 Microsoft
References	~~() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38230 -~~	() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38230 - Patch, Vendor Advisory
CPE		cpe:2.3:o:microsoft:windows_server_2016:::::::: cpe:2.3:o:microsoft:windows_server_2019:::::::: cpe:2.3:o:microsoft:windows_server_2012:r2::::::x64: cpe:2.3:o:microsoft:windows_server_2022::::::::

10 Sep 2024, 17:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-09-10 17:15

Updated : 2024-09-17 16:56

NVD link : CVE-2024-38230

Mitre link : CVE-2024-38230

CVE.ORG link : CVE-2024-38230

JSON object : View

Products Affected

CWE

NVD-CWE-noinfo CWE-20

Improper Input Validation

{"id": "CVE-2024-38230", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2024-09-10T17:15:25.917", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38230", "tags": ["Patch", "Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Windows Standards-Based Storage Management Service Denial of Service Vulnerability"}, {"lang": "es", "value": "Vulnerabilidad de denegaci\u00f3n de servicio del servicio de administraci\u00f3n de almacenamiento basado en est\u00e1ndares de Windows"}], "lastModified": "2024-09-17T16:56:15.420", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "8968BAC8-A1DB-4F88-89F8-4BE47919C247"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6291C92-7D32-4CC2-B601-FAF5B70F3BFD", "versionEndExcluding": "10.0.14393.7336"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD2C9E88-C858-4B3D-A8C5-251DD6B69FD6", "versionEndExcluding": "10.0.17763.6293"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4399F533-0094-43CF-872E-FC8E4A21A904", "versionEndExcluding": "10.0.20348.2700"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}