CVE-2024-49106

Summary

CVE-2024-49106 is a recently disclosed vulnerability affecting Microsoft's Remote Desktop Services. This issue permits an unauthenticated attacker to execute arbitrary code on a targeted system. Exploitation occurs when the RDS listens on an incorrect TCP port, leading to a heap buffer overflow. Successful exploitation grants the attacker remote code execution rights, enabling them to install malware, steal sensitive data, or take control of the compromised system. Microsoft has released a patch to address this vulnerability, and it is strongly advised that all affected systems be updated promptly to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.