CVE-2024-43468

🗓️ 08 Oct 2024 17:35:48Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 11 Media mentions👁 460 Views🌐 WEB

Microsoft Configuration Manager Remote Code Execution Vulnerabilit

Reporter	Title	Published	Views	Family All 25
GithubExploit	Exploit for SQL Injection in Microsoft	17 Jan 202512:20	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Microsoft	25 Oct 202414:53	–	githubexploit
GithubExploit	Exploit for SQL Injection in Microsoft	26 Nov 202412:39	–	githubexploit
ATTACKERKB	CVE-2024-43468	8 Oct 202418:15	–	attackerkb
Information Security Automation	New episode “In the Trend of VM” (#12): 8 February CVEs & Why the Darknet Matters for VM Specialists	11 Mar 202510:10	–	avleonov
Information Security Automation	About Remote Code Execution – Microsoft Configuration Manager (CVE-2024-43468) vulnerability	4 Feb 202512:32	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Configuration Manager software for managing IT infrastructure lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.	11 Oct 202400:00	–	bdu_fstec
Circl	CVE-2024-43468	8 Oct 202417:54	–	circl
CISA KEV Catalog	Microsoft Configuration Manager SQL Injection Vulnerability	12 Feb 202600:00	–	cisa_kev
CISA	CISA Adds Four Known Exploited Vulnerabilities to Catalog	12 Feb 202612:00	–	cisa

NVD

Vulners

CNA

Node

microsoft configuration_manager_2403Match-

microsoft configuration_manager_2409Match-

microsoft configuration_manager_2503Match-

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Configuration Manager",
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "5.00.9106",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43468
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
sql	path	dummyEndpoint	Unauthenticated SQL injection in SCCM CVE-2024-43468 leading to potential remote code execution	CWE-89

17 Jun 2026 07:51Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

EPSS0.6111

SSVC