CVE-2024-43506

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Oct 8, 2024
Updated: Oct 17, 2024
CWE ID 400

Summary

CVE-2024-43506 is a newly identified denial-of-service (DoS) vulnerability affecting Microsoft BranchCache, a component that helps to deliver content, such as files, applications, and live OS images, from a local cache to reduce network usage and response times. An attacker can exploit this vulnerability by sending specially crafted packets to a BranchCache-enabled server or client, leading to a denial-of-service condition and potentially causing service disruptions. The exact nature of the exploit and the required privileges for successful exploitation are still under investigation. It is recommended that affected organizations apply the forthcoming Microsoft patches as soon as they become available to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share