Kaspersky LabKLA62824KLA62824 Multiple vulnerabilities in Microsoft Products (ESU)
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.7 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
71.1%
Detect date:
01/09/2024
Severity:
Critical
Description:
Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, bypass security restrictions, gain privileges, cause denial of service, execute arbitrary code.
Exploitation:
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
Affected products:
Windows Server 2012 (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2012 R2 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2
Solution:
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories:
CVE-2024-21320
CVE-2024-20680
CVE-2024-20674
CVE-2024-20692
CVE-2024-21313
CVE-2024-20652
CVE-2024-20657
CVE-2024-20660
CVE-2024-20664
CVE-2024-20662
CVE-2024-20661
CVE-2024-20691
CVE-2024-20683
CVE-2024-20654
CVE-2024-21307
CVE-2024-21314
CVE-2024-20653
CVE-2024-20663
CVE-2024-20658
CVE-2024-20655
CVE-2024-21311
CVE-2024-20682
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2024-213206.5High
CVE-2024-206806.5High
CVE-2024-206748.8Critical
CVE-2024-206925.7High
CVE-2024-213135.3High
CVE-2024-206528.1Critical
CVE-2024-206577.0High
CVE-2024-206606.5High
CVE-2024-206646.5High
CVE-2024-206624.9Warning
CVE-2024-206617.5Critical
CVE-2024-206914.7Warning
CVE-2024-206837.8Critical
CVE-2024-206548.0Critical
CVE-2024-213077.5Critical
CVE-2024-213146.5High
CVE-2024-206537.8Critical
CVE-2024-206636.5High
CVE-2024-206587.8Critical
CVE-2024-206556.6High
CVE-2024-213115.5High
CVE-2024-206827.8Critical
KB list:
5034173
5034120
5034167
5034184
5034169
5034176
5034171
Microsoft official advisories:
References
support.microsoft.com/kb/5034120
support.microsoft.com/kb/5034167
support.microsoft.com/kb/5034169
support.microsoft.com/kb/5034171
support.microsoft.com/kb/5034173
support.microsoft.com/kb/5034176
support.microsoft.com/kb/5034184
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20652
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20653
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20654
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20655
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20657
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20658
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20660
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20661
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20662
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20663
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20664
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20674
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20680
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20682
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20683
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20691
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20692
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21307
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21311
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21313
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21314
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21320
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20652
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20653
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20654
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20655
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20657
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20658
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20660
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20661
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20662
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20663
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20664
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20674
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20680
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20682
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20683
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20691
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20692
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21307
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21311
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21313
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21314
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21320
portal.msrc.microsoft.com/en-us/security-guidance
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2008/
threats.kaspersky.com/en/product/Microsoft-Windows-Server-2012/
threats.kaspersky.com/en/product/Microsoft-Windows-Server/
threats.kaspersky.com/en/product/Microsoft-Windows/
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.7 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
71.1%