Описание
Microsoft Defender for IoT Remote Code Execution Vulnerability
FAQ
According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires the attacker to be an administrator of the web application. As is best practice, regular validation and audits of administrative groups should be conducted.
What actions do customers need to take to protect themselves from this vulnerability?
Customers need to update their Defender for IoT software to version 24.1.3 or above. For more information, see OT monitoring software versions.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Microsoft Defender for IoT |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
DOS
EPSS
7.2 High
CVSS3
Связанные уязвимости
Microsoft Defender for IoT Remote Code Execution Vulnerability
Microsoft Defender for IoT Remote Code Execution Vulnerability
Уязвимость комплекса средств по обнаружению угроз для сред Интернета вещей Microsoft Defender for IoT, связанная с непринятием мер по нейтрализации специальных элементов, используемых в команде операционной системы, позволяющая нарушителю выполнить произвольный код
EPSS
7.2 High
CVSS3