CVE-2024-26197

EPSS 5.53%
Published 12.03.2024 17:15:58
Last modified 27.12.2024 17:14:36
Source secure@microsoft.com
Teams watchlist Login
Open Login

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Windows Server 2012 Versionr2

Microsoft ≫ Windows Server 2016 Version < 10.0.14393.6796

Microsoft ≫ Windows Server 2019 Version < 10.0.17763.5576

Microsoft ≫ Windows Server 2022 Version < 10.0.20348.2340

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	5.53%	0.899

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
secure@microsoft.com	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26197

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-26197

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-26197

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-26197

EUVD