CVE-2024-22410
CVSS 3.1 Score 3.3 of 10 (low)
Details
Summary
CVE-2024-22410 is a vulnerability affecting the Windows binary of the Creditcoin node, a network that facilitates cross-blockchain credit transactions. The vulnerability arises from the DLLs provided by Microsoft that are loaded at startup. If an attacker gains access to overwrite the program files directory, they can replace these DLLs and execute arbitrary code. The vulnerable DLL files are related to the Windows networking subsystem, the Visual C++ runtime, and low-level cryptographic primitives. This vulnerability poses a low-security risk as per the blockchain development team, but it affects a wide range of applications dependent on these DLLs, including enterprise-level security applications and game engines. Running Creditcoin on Windows is officially unsupported, according to the blockchain team.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions