KLA65506 Multiple vulnerabilities in Microsoft System Center

🗓️ 09 Apr 2024 00:00:00Reported by Kaspersky LabType

kaspersky

kaspersky🔗 threats.kaspersky.com👁 47 Views

Multiple vulnerabilities in Microsoft System Center, critical impact, affect Microsoft Defender for IoT

Reporter	Title	Published	Views	Family All 68
BDU FSTEC	The vulnerability of the Microsoft Defender for IoT’s threat detection mechanism lies in the lack of measures to neutralize special elements used in the operating system’s command set, allowing attackers to execute arbitrary code.	16 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the threat detection mechanism for Microsoft Defender for IoT involves an incorrect path name limitation, allowing attackers to execute arbitrary code.	17 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the threat detection mechanism for Microsoft Defender for IoT, related to access control deficiencies, allows attackers to escalate their privileges.	17 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the threat detection mechanism for Microsoft Defender for IoT, related to access control deficiencies, allows attackers to enhance their privileges.	2 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the threat detection mechanism for Microsoft Defender for IoT, related to access control deficiencies, allows attackers to enhance their privileges.	2 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the threat detection mechanism for Microsoft Defender for IoT involves an incorrect restriction on the path name to the restricted catalog, allowing attackers to execute arbitrary code.	2 May 202400:00	–	bdu_fstec
CNNVD	Microsoft Defender 安全漏洞	9 Apr 202400:00	–	cnnvd
CNNVD	Microsoft Defender 安全漏洞	9 Apr 202400:00	–	cnnvd
CNNVD	Microsoft Defender 安全漏洞	9 Apr 202400:00	–	cnnvd
CNNVD	Microsoft Defender 安全漏洞	9 Apr 202400:00	–	cnnvd

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21324
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29055
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21323
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29054
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29053
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21322
threats	www.threats.kaspersky.com/en/product/Microsoft-Defender-for-IoT/
statistics	www.statistics.securelist.com/

26 Mar 2025 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 3.18.8

EPSS0.03199

SSVC

microsoft system center critical microsoft defender for iot privilege escalation arbitrary code execution system updates ace cve-2024-21324 cve-2024-29055 cve-2024-21323 cve-2024-29054 cve-2024-29053 cve-2024-21322