CVE-2024-43615

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Oct 8, 2024
Updated: Oct 21, 2024
CWE ID 73

Summary

CVE-2024-43615 is a newly disclosed vulnerability affecting Microsoft OpenSSH for Windows. This issue permits an unauthenticated attacker to execute arbitrary code on targeted systems through a specially crafted SSH packet. Exploitation of this vulnerability could lead to significant security implications and potential data breaches. Users are strongly urged to update their OpenSSH installation as soon as possible to mitigate this risk. Microsoft has released a patch to address the vulnerability and encourages administrators to apply it promptly. Failure to do so may leave systems vulnerable to remote code execution attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share