CVE-2024-43544

Summary

CVE-2024-43544 designates a newly disclosed Denial of Service (DoS) vulnerability affecting Microsoft's Simple Certificate Enrollment Protocol (SCEP). Malicious actors can exploit this flaw to send specially crafted requests, causing the targeted SCEP server to consume excessive system resources and become unresponsive. The vulnerability poses a potential threat to organizations that rely on SCEP for certificate enrollment and management. Microsoft is currently working on a patch to mitigate this issue. In the meantime, administrators are advised to implement protective measures, such as limiting access to SCEP servers and employing intrusion prevention systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.