PT-2024-6788 · Unknown+1 · Sudo For Windows+1

Michael Torres · Published 2024-10-08 · Updated 2024-10-16 · CVE-2024-43571

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sudo for Windows (affected versions not specified)

Description The issue is related to a spoofing vulnerability in the system administration utility Sudo for Windows. It is caused by improper restriction of the communication channel for supposed endpoints. Exploitation of this issue may allow an attacker to conduct spoofing attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-923

Related Identifiers

BDU:2024-08004

CVE-2024-43571

Affected Products

Sudo For Windows

Windows

References · 9

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-43571 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43571 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-43571 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43571 · Security Note
• https://bdu.fstec.ru/vul/2024-08004 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43571 · Security Note
• https://github.com/microsoft/sudo · Note
• https://t.me/cvenotify/98394 · Telegram Post
• https://twitter.com/CVEnew/status/1843710891168067889 · Twitter Post