---
cve: "CVE-2024-43572"
severity: "HIGH"
cvss: 7.8
epss: "66.7%"
vendor: "Microsoft"
kev: true
exploited: true
published: "2024-10-08 17:36:10"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-11-07T16:21:24+01:00"
---

# CVE-2024-43572

> 7.8 HIGH · ⚠️ CISA KEV (760 Tage) · 🔓 Exploited

## Beschreibung

Microsoft Management Console Remote Code Execution Vulnerability

## CNA-Record (Kanon, cvelistV5)

- CNA: **microsoft**
- State: PUBLISHED
- Stand: 2026-08-19 16:27:08
- CNA-CVSS: **7.8** (`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C`)

## CISA-Anreicherung (vulnrichment/ADP)

- CISA KEV seit: **08.10.2024**
- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **active**
  - Automatable: **no**
  - Technical Impact: **total**

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Erforderlich | good |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Schwachstellen-Klasse

- **CWE-707** — Improper Neutralization
  The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being used when received from an upstream component, or before being sent to a downstream component.

## Angriffsmuster (CAPEC)

- [CAPEC-3 — Using Leading 'Ghost' Character Sequences to Bypass Input Filters](https://capec.mitre.org/data/definitions/3.html) _(Severity: Medium)_
- [CAPEC-43 — Exploiting Multiple Input Interpretation Layers](https://capec.mitre.org/data/definitions/43.html) _(Severity: High)_
- [CAPEC-250 — XML Injection](https://capec.mitre.org/data/definitions/250.html)
- [CAPEC-276 — Inter-component Protocol Manipulation](https://capec.mitre.org/data/definitions/276.html)
- [CAPEC-277 — Data Interchange Protocol Manipulation](https://capec.mitre.org/data/definitions/277.html)
- [CAPEC-278 — Web Services Protocol Manipulation](https://capec.mitre.org/data/definitions/278.html)
- [CAPEC-279 — SOAP Manipulation](https://capec.mitre.org/data/definitions/279.html) _(Severity: High)_
- [CAPEC-468 — Generic Cross-Browser Cross-Domain Theft](https://capec.mitre.org/data/definitions/468.html) _(Severity: Medium)_

## BSI-Hinweise (deutsch)

- [Microsoft Windows: Mehrere Schwachstellen](https://wid.cert-bund.de/portal/wid/sicherheitshinweis/WID-SEC-W-2024-3121) — _BSI-Einstufung: hoch_
  Ein Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows Server und Microsoft Windows ausnutzen, um seine Privilegien zu erhöhen, um Sicherheitsmechanismen zu umgehen, um einen Denial of Service Zustand herbeizuführen und um beliebigen Code auszuführen.

## Referenzen

- <https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43572>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2024-43572/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_