5.7
CVE-2024-20692
- EPSS 1.07%
- Published 09.01.2024 18:15:52
- Last modified 21.11.2024 08:52:56
- Source secure@microsoft.com
- Teams watchlist Login
- Open Login
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Windows 10 1507 Version < 10.0.10240.20402
Microsoft ≫ Windows 10 1607 Version < 10.0.14393.6614
Microsoft ≫ Windows 10 1809 Version < 10.0.17763.5329
Microsoft ≫ Windows 10 21h2 Version < 10.0.19044.3930
Microsoft ≫ Windows 10 22h2 Version < 10.0.19045.3930
Microsoft ≫ Windows 11 21h2 Version < 10.0.22000.2713
Microsoft ≫ Windows 11 22h2 Version < 10.0.22621.3007
Microsoft ≫ Windows 11 23h2 Version < 10.0.22631.3007
Microsoft ≫ Windows Server 2008 Version- Updatesp2 HwPlatformx64
Microsoft ≫ Windows Server 2008 Version- Updatesp2 HwPlatformx86
Microsoft ≫ Windows Server 2012 Version-
Microsoft ≫ Windows Server 2012 Versionr2
Microsoft ≫ Windows Server 2016 Version < 10.0.14393.6614
Microsoft ≫ Windows Server 2019 Version < 10.0.17763.5329
Microsoft ≫ Windows Server 2022 Version < 10.0.20348.2227
Microsoft ≫ Windows Server 2022 23h2 Version < 10.0.25398.643
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.07% | 0.768 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.7 | 2.1 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
|
| secure@microsoft.com | 5.7 | 2.1 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
|
CWE-326 Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
CWE-668 Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.