Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
CVE-2024-38188

7.1HIGH

Key Information:

Vendor
Microsoft
Vendor
CVE Published:
10 September 2024

Summary

The vulnerability in Azure Network Watcher VM Agent relates to an elevation of privilege issue, which can be exploited by attackers to gain unauthorized access to sensitive system resources. Successfully leveraging this exploit could lead to severe implications for system security and integrity. As a critical component of Microsoft's Azure infrastructure, the VM Agent requires immediate attention to mitigate risks associated with unauthorized access.

Affected Version(s)

Azure Network Watcher VM Extension Unknown 1.4.3320.1

References

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre DatabaseMicrosoft Feed
.