CVE-2024-48997
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Nov 12, 2024
Updated: Nov 15, 2024
CWE ID 122
Summary
CVE-2024-48997 is a remote code execution vulnerability affecting SQL Server Native Client. An attacker can exploit this issue by sending specially crafted packets to the target server, leading to the execution of arbitrary code with the privileges of the SQL Server service. Successful exploitation could result in unauthorized access, data theft, or system compromise. Users are advised to apply the forthcoming Microsoft patch as soon as it becomes available to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft SQL Server
Affected Vendors
- Microsoft