PT-2024-6922 · Microsoft · Windows Kernel-Mode Driver+1

Angelboy · Published 2024-10-08 · Updated 2024-10-17 · CVE-2024-43554

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Kernel-Mode Driver (affected versions not specified)

Description The issue is related to an information disclosure vulnerability in the Windows Kernel-Mode Driver. It is caused by improper cross-boundary removal of critical data, which can allow an attacker to disclose protected information. This vulnerability can be exploited to obtain sensitive information and affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-212

Related Identifiers

BDU:2024-08145

CVE-2024-43554

Affected Products

Windows

Windows Kernel-Mode Driver

References · 9

• https://osv.dev/vulnerability/CVE-2024-43554 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08145 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43554 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43554 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43554 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-43554 · Vendor Advisory
• https://t.me/cvenotify/98650 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1843947348793196972 · Twitter Post
• https://vuldb.com/?id.279725 · Note