CVE-2024-49018

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Nov 12, 2024
Updated: Nov 15, 2024
CWE ID 197

Summary

CVE-2024-49018 is a newly disclosed vulnerability affecting SQL Server Native Client. This issue allows an attacker to execute arbitrary code remotely by sending specially crafted packets to the SQL Server over the network. Successful exploitation could lead to a complete system compromise, making it a significant security risk for organizations using SQL Server Native Client. To mitigate this vulnerability, it is recommended to apply the latest security patches and updates provided by Microsoft as soon as possible. Users should also ensure that their SQL Server instances are configured securely and that network access is restricted to trusted sources.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft SQL Server

Affected Vendors

  • Microsoft