CVE-2024-26202
Published: 09 April 2024
Summary
CVE-2024-26202 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Microsoft Windows Server 2012. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 8.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2024-26202 is a remote code execution vulnerability in the DHCP Server Service, carrying a CVSS 3.1 base score of 7.2. The flaw is tracked under CWE-122 and affects the DHCP component responsible for network address allocation on systems running the service.
An attacker with high privileges and network access can exploit the issue without user interaction, resulting in full compromise of confidentiality, integrity, and availability on the affected server. The attack vector is rated as network-reachable, indicating the service can be targeted remotely once the required credentials are obtained.
Microsoft has published an advisory for CVE-2024-26202 that details available updates and guidance for administrators.
The associated EPSS score remains flat at 0.0641 with no material increase since disclosure, and no information on in-the-wild exploitation has been reported.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-23478
Vulnerability details
DHCP Server Service Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.