CVE-2024-45546

Summary

CVE-2024-45546 is a newly disclosed vulnerability affecting certain devices. This issue involves memory corruption during the processing of FIPS encryption or decryption IOCTL (Input/Output Control) calls initiated from user-space. The vulnerability has the potential to allow an attacker to execute arbitrary code or cause a denial-of-service condition, posing a significant risk to affected systems. Successful exploitation of this vulnerability may lead to unauthorized access, data theft, or system instability. Mitigation measures include applying patches as soon as they become available and restricting user access to the affected functionality until the risk can be effectively managed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.