CVE-2024-38063
Published: 13 August 2024
Summary
CVE-2024-38063 is a critical-severity Wrap or Wraparound (CWE-191) vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 0.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2024-38063 is a remote code execution vulnerability in the Windows TCP/IP stack, carrying a CVSS 3.1 base score of 9.8. The flaw stems from an integer underflow condition (CWE-191) that can be triggered by specially crafted network traffic, affecting the core networking component present in supported Windows releases.
An unauthenticated attacker can exploit the issue over the network without user interaction by sending malicious packets to an exposed Windows system. Successful exploitation grants the attacker the ability to execute arbitrary code with the privileges of the TCP/IP driver, resulting in full confidentiality, integrity, and availability impact on the target host.
Microsoft’s Security Response Center advisory at the referenced URL addresses mitigation through the installation of the security updates released on August 13, 2024, and notes that the vulnerability can also be addressed by applying the latest cumulative update packages for affected Windows versions. The associated EPSS score has remained elevated near its recorded peak of 0.9064.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-37238
Vulnerability details
Windows TCP/IP Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.