CVE-2024-38138

Summary

CVE-2024-38138 is a newly disclosed vulnerability affecting Windows Deployment Services. This issue grants an unauthenticated attacker the ability to execute arbitrary code on targeted Windows servers. Exploitation occurs through specially crafted DHCP options in DHCP responses, which trick the Windows Deployment Services into loading and executing malicious code. This poses a significant risk to organizations using these services, necessitating immediate patching to prevent potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.