CVE-2024-20680

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jan 9, 2024
Updated: Jan 14, 2024

Summary

CVE-2024-20680 is a vulnerability affecting Windows Message Queuing Client (MSMQC) that can result in information disclosure. The vulnerability has a base severity of MEDIUM and a base score of 6.5. It requires low privileges to exploit and does not require user interaction. The attack vector is through the network, and it does not have an impact on integrity but poses a high risk to confidentiality. The vulnerability has a CVSS vector string of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The exploitability score is 2.8, and the impact score is 3.6. The vulnerability affects a wide range of products, as indicated by the affected_products field in the source data. There are no details provided regarding how to remediate this vulnerability or any related events or analysis descriptions mentioned in the source data from secure@microsoft.com.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-20680 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options