PT-2024-5503 · Microsoft · Office 2016+4

Jim + 1 · Published 2024-08-08 · Updated 2026-04-23 · CVE-2024-38200

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Office versions prior to the fixed version Microsoft Office 2016 Microsoft Office 2019 Microsoft Office LTSC 2021 Microsoft 365 Apps for Enterprise

Description A spoofing vulnerability in Microsoft Office allows attackers to affect the system. The vulnerability is related to insufficient protection of service data and can be exploited by an attacker to steal NTLM hashes. This can be done by guiding the victim to a website or opening a specially crafted file. The vulnerability affects various versions of Microsoft Office, including Office 2016, Office 2019, Office LTSC 2021, and Microsoft 365 Apps for Enterprise.

Recommendations For Microsoft Office 2016, update to a newer version that contains a fix for this vulnerability. For Microsoft Office 2019, update to a newer version that contains a fix for this vulnerability. For Microsoft Office LTSC 2021, update to a newer version that contains a fix for this vulnerability. For Microsoft 365 Apps for Enterprise, update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider blocking NTLM traffic to minimize the risk of exploitation. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using the parameter user id in the affected API endpoint until the issue is resolved. Configure the Network Security: Restrict NTLM: Outgoing NTLM traffic to remote servers policy setting to block outgoing NTLM traffic from a computer running Windows Server 2008, Windows Server 2008 R2, or later to any remote server running the Windows operating system.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2024-06152

CVE-2024-38200

Affected Products

365 Apps For Enterprise

Office

Office 2016

Office 2019

Office Ltsc 2021

References · 111

• 🔥 https://github.com/passtheticket/CVE-2024-38200 · Exploit
• 🔥 https://exploit-db.com/exploits/52113 · Exploit
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38200 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38200 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38200 · Security Note
• https://osv.dev/vulnerability/CVE-2024-38200 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06152 · Security Note
• https://twitter.com/Brandefense/status/1822921002868785621 · Twitter Post
• https://twitter.com/SecurityAid/status/1854088016534409481 · Twitter Post
• https://t.me/zerodayalert/347 · Telegram Post
• https://twitter.com/Channeliam/status/1823293321139347652 · Twitter Post
• https://twitter.com/hackyboiz/status/1872945594420887567 · Twitter Post
• https://twitter.com/greyhathackr/status/1842188736593035284 · Twitter Post
• https://t.me/sysadm_in_up/2193 · Telegram Post
• https://twitter.com/Lulztigre/status/1841894067363262923 · Twitter Post