CVE-2024-48994
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Nov 12, 2024
Updated: Nov 15, 2024
CWE ID 122
Summary
CVE-2024-48994 is a newly disclosed remote code execution vulnerability affecting SQL Server Native Client. An attacker can exploit this weakness by sending specially crafted packets to the affected system, enabling them to execute arbitrary code. Successful exploitation of this vulnerability could result in significant data loss or unauthorized access to the underlying database. It is crucial for organizations using SQL Server Native Client to apply the forthcoming patch as soon as it becomes available to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft SQL Server
Affected Vendors
- Microsoft