CVE-2024-22410

CVSS 3.1 Score 3.3 of 10 (low)

Details

Published Jan 17, 2024
Updated: Jan 26, 2024
CWE ID 426

Summary

CVE-2024-22410 is a vulnerability affecting the Windows binary of the Creditcoin node, a network that facilitates cross-blockchain credit transactions. The vulnerability arises from the DLLs provided by Microsoft that are loaded at startup. If an attacker gains access to overwrite the program files directory, they can replace these DLLs and execute arbitrary code. The vulnerable DLL files are related to the Windows networking subsystem, the Visual C++ runtime, and low-level cryptographic primitives. This vulnerability poses a low-security risk as per the blockchain development team, but it affects a wide range of applications dependent on these DLLs, including enterprise-level security applications and game engines. Running Creditcoin on Windows is officially unsupported, according to the blockchain team.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-22410 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options