PT-2024-6148 · Microsoft · Windows Remote Desktop Licensing Service+1

Chunyang Han + 2 · Published 2024-09-10 · Updated 2024-09-13 · CVE-2024-38260

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Licensing Service (affected versions not specified)

Description The vulnerability in the Windows Remote Desktop Licensing Service is related to the use of an uninitialized resource. Exploitation of this issue may allow a remote attacker to execute arbitrary code, potentially impacting the system. This could enable remote attackers to run malicious code, affecting the system's security.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

BDU:2024-07067

CVE-2024-38260

Affected Products

Windows

Windows Remote Desktop Licensing Service

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-38260 · Security Note
• https://osv.dev/vulnerability/CVE-2024-38260 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38260 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-38260 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-07067 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38260 · Security Note
• https://twitter.com/CveFindCom/status/1833559223688478771 · Twitter Post
• https://twitter.com/AegisLens/status/1833670309792149813 · Twitter Post
• https://twitter.com/windowsforum/status/1833610469266931893 · Twitter Post
• https://twitter.com/CVEnew/status/1833561347885342973 · Twitter Post