Microsoft System Center Elevation of Privilege Vulnerability
CVE-2024-43594

7.3HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft System Center 2022
Microsoft System Center 2019
Microsoft System Center 2025
Vendor
CVE Published:
12 December 2024

What is CVE-2024-43594?

An elevation of privilege vulnerability exists in Microsoft System Center, allowing an attacker to gain unauthorized access to system resources. If successfully exploited, this vulnerability could enable attackers to execute arbitrary code with elevated privileges, compromising the integrity and security of the system. Microsoft has released guidance on mitigating the risks associated with this vulnerability, emphasizing the importance of applying relevant security updates.

Affected Version(s)

Microsoft System Center 2019 Unknown 10.19.10050.0

Microsoft System Center 2022 Unknown 10.22.10118.0

Microsoft System Center 2025 Unknown 10.25.10132.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-43594 : Microsoft System Center Elevation of Privilege Vulnerability