Today > | 1 High | 4 Medium vulnerabilities - You can now download lists of IOCs here!

CVE-2024-43474

Sept. 10, 2024, 5:43 p.m.

CVSS Score

7.6 / 10

Product(s) Impacted

Microsoft SQL Server

Description

Microsoft SQL Server Information Disclosure Vulnerability

Weaknesses

CWE-170

Improper Null Termination

The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.

CWE ID: 170

Date

Published: Sept. 10, 2024, 5:15 p.m.

Last Modified: Sept. 10, 2024, 5:43 p.m.

Status : Awaiting Analysis

CVE is currently being analyzed by NVD staff, this process results in association of reference link tags, CVSS scores, CWE association, and CPE applicability statements.

More info

Source

secure@microsoft.com

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

Base Score

7.6

Exploitability Score

2.8

Impact Score

4.7

Base Severity