Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/06/13 1:19 a.m.•17 views

CVE-2024-1243

Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for...

9.5CVSS7.6AI score0.00637EPSS
SaveExploits1References1
Circl
Circl
•added 2025/06/11 2:37 a.m.•38 views

CVE-2024-1243

creationtimestamp| type| source ---|---|--- 2025-06-11 02:37:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18039 2025-06-11 05:50:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcplnttgq2q 2025-06-11 11:03:35+00:00| seen|...

9.5CVSS4.8AI score0.00637EPSS
SaveExploits1References2
NVD
NVD
•added 2025/06/11 2:15 a.m.•51 views

CVE-2024-1243

Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for...

9.5CVSS0.00637EPSS
SaveExploits1References3
CVE
CVE
•added 2025/06/11 1:15 a.m.•80 views

CVE-2024-1243

The CVE-2024-1243 entry concerns Wazuh agent for Windows prior to 4.8.0. It states improper input validation can be exploited by an attacker who controls the Wazuh server or agent key to configure the agent to connect to a malicious UNC path, leading to leakage of the machine account NetNTLMv2 ha...

9.5CVSS8.2AI score0.00637EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/06/11 1:15 a.m.•19 views

CVE-2024-1243 Remote code execution and local privilege escalation in Wazuh Windows agent via NetNTLMv2 hash theft

Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for...

9.5CVSS8.2AI score0.00637EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/06/11 1:15 a.m.•55 views

CVE-2024-1243 Remote code execution and local privilege escalation in Wazuh Windows agent via NetNTLMv2 hash theft

Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for...

9.5CVSS0.00637EPSS
SaveExploits1References3
Rows per page
Query Builder