PT-2023-2415 · Microsoft · Defender

Shmuel Cohen + 1 · Publicado 2023-04-11 · Atualizado 2026-01-10 · CVE-2023-24860

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Defender versions (affected versions not specified)

Description The issue is related to insufficient input validation in Microsoft Defender, which can be exploited by a remote attacker to cause a denial of service by sending specially crafted data. This vulnerability may allow for unauthenticated remote deletion of critical files, including potentially the entire production database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

RCE

Enumeração de Fraquezas

CWE-400

CWE-20

Identificadores relacionados

BDU:2023-02200

CVE-2023-24860

Produtos afetados

Defender

Referências · 9

• https://twitter.com/fletch_ai/status/1690530396167974912 · Publicação no Twitter
• https://twitter.com/CONFidenceConf/status/1785258016394059882 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2023-02200 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-24860 · Nota de Segurança
• https://t.me/cvenotify/48590 · Publicação no Telegram
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24860 · Aviso do Fabricante
• https://cybersecurity-help.cz/vdb/SB2023041204 · Nota
• https://osv.dev/vulnerability/CVE-2023-24860 · Aviso do Fabricante
• https://twitter.com/BlackHatEvents/status/1809549104634016143 · Publicação no Twitter