CVE-2024-43451
Published: 12 November 2024
Summary
CVE-2024-43451 is a medium-severity External Control of File Name or Path (CWE-73) vulnerability in Microsoft Windows 10 21H2. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 0.4% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.
Deeper analysis
CVE-2024-43451 is an NTLM Hash Disclosure Spoofing Vulnerability carrying a CVSS 3.1 score of 6.5. The flaw enables an attacker to obtain NTLM hashes via spoofing and is tracked under CWE-73.
An unauthenticated remote attacker can trigger the issue over the network with no privileges required, provided the victim performs a user interaction such as opening attacker-controlled content; successful exploitation discloses NTLM hashes and therefore compromises confidentiality while leaving integrity and availability unaffected.
Microsoft has issued an advisory detailing the vulnerability, and CISA has added CVE-2024-43451 to its Known Exploited Vulnerabilities catalog. The associated EPSS score currently stands at 0.9031 with a recorded peak of 0.9039, indicating sustained and substantial exploitation interest following disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-40720
Vulnerability details
NTLM Hash Disclosure Spoofing Vulnerability
- CWE(s)
- KEV Date Added
- 12 November 2024
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Rejects externally supplied file or resource identifiers that fail validity checks.