PT-2023-2415 · Microsoft · Defender

Shmuel Cohen + 1 · Published 2023-04-11 · Updated 2026-01-10 · CVE-2023-24860

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Defender versions (affected versions not specified)

Description The issue is related to insufficient input validation in Microsoft Defender, which can be exploited by a remote attacker to cause a denial of service by sending specially crafted data. This vulnerability may allow for unauthenticated remote deletion of critical files, including potentially the entire production database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

RCE

Weakness Enumeration

CWE-400

CWE-20

Related Identifiers

BDU:2023-02200

CVE-2023-24860

Affected Products

Defender

References · 9

• https://bdu.fstec.ru/vul/2023-02200 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-24860 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24860 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-24860 · Vendor Advisory
• https://twitter.com/fletch_ai/status/1690530396167974912 · Twitter Post
• https://twitter.com/CONFidenceConf/status/1785258016394059882 · Twitter Post
• https://t.me/cvenotify/48590 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2023041204 · Note
• https://twitter.com/BlackHatEvents/status/1809549104634016143 · Twitter Post