CVE-2024-38073

2024-07-0917:15:41

CWE-125

[email protected]

web.nvd.nist.gov

windows

remote desktop

denial of service

vulnerability

2024-38073

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

27.5%

JSON

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Affected configurations

Nvd

Node

microsoftwindows_server_2008Match-sp2x64

microsoftwindows_server_2008Match-sp2x86

microsoftwindows_server_2008Matchr2sp1x64

microsoftwindows_server_2012Match-

microsoftwindows_server_2012Matchr2

microsoftwindows_server_2016Range<10.0.14393.7159

microsoftwindows_server_2019Range<10.0.17763.6054

microsoftwindows_server_2022Range<10.0.20348.2582

microsoftwindows_server_2022_23h2Range<10.0.25398.1009

VendorProductVersionCPE
microsoftwindows_server_2008-cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*
microsoftwindows_server_2008-cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
microsoftwindows_server_2012-cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
microsoftwindows_server_2012r2cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
microsoftwindows_server_2016*cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoftwindows_server_2022_23h2*cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_server_2008	-	cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::x64:*
microsoft	windows_server_2008	-	cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::x86:*
microsoft	windows_server_2008	r2	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*
microsoft	windows_server_2012	-	cpe:2.3:o:microsoft:windows_server_2012:-:::::::*
microsoft	windows_server_2012	r2	cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*
microsoft	windows_server_2016	*	cpe:2.3:o:microsoft:windows_server_2016::::::::
microsoft	windows_server_2019	*	cpe:2.3:o:microsoft:windows_server_2019::::::::
microsoft	windows_server_2022	*	cpe:2.3:o:microsoft:windows_server_2022::::::::
microsoft	windows_server_2022_23h2	*	cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::