Lucene search

K
mscveMicrosoftMS:CVE-2024-35261
HistoryJul 09, 2024 - 7:00 a.m.

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

2024-07-0907:00:00
Microsoft
msrc.microsoft.com
5
azure
network
watcher
extension
privilege
vulnerability
microsoft

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

18.1%

Affected configurations

Vulners
Node
microsoftazure_network_watcher_agentRange<1.4.3320.1windows
VendorProductVersionCPE
microsoftazure_network_watcher_agent*cpe:2.3:a:microsoft:azure_network_watcher_agent:*:*:*:*:*:windows:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

18.1%