CVE-2024-43629

Summary

CVE-2024-43627 is a newly disclosed remote code execution vulnerability affecting the Windows Telephony Service. An attacker can exploit this flaw by sending maliciously crafted SIP INVITE messages to a targeted system, resulting in arbitrary code execution with system privileges. Successful exploitation could lead to serious consequences, including data theft, unauthorized system access, and complete system compromise. It is recommended that affected systems be updated as soon as possible to mitigate this risk. Microsoft is expected to release a patch to address this vulnerability. Until then, organizations should implement temporary workarounds and monitor their networks for suspicious activity.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.