Exploit

CVE-2024-43451

External Control of File Name or Path (CWE-73)

Published: Nov 12, 2024

According to the CVSS metric, successful exploitation of this vulnerability could lead to total loss of confidentiality (C:H)? According to the CVSS metric, user interaction is required (UI:R).

Operational resilience: Critical third parties to the UK financial sector - Bank of England publishes - “Respondents were particularly concerned about potential requirements or expectations on CTPs to disclose unremedied vulnerabilities (in the cyber-security sense) to the regulators and to the firms they provide systemic third party services, as this could increase the risk of threat actors exploiting these vulnerabilities, which would go against the Overall Objective.” Majority of top vulnerabilities were first exploited as zero-days allowing malicious actors to compromise higher-priority targets

None of the following critical vulnerabilities below have been reported as being actively exploited or publicly disclosed: The following vulnerabilities have been reported as publicly disclosed, but not yet actively exploited :

Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats.

CVE Id : CVE-2024-43451 Published Date: 2024-11-12T00:00:00 NTLM Hash Disclosure Spoofing Vulnerability https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-43451 https://www.cisa.gov/known-exploited-vulnerabilities-catalog inTheWild added CVE-2024-43451 to the list of known exploited vulnerabilities.

ClearSky Cyber Security discovered a zero-day vulnerability (CVE-2024-43451) on Windows systems through URL files, exploited for NTLM hash exfiltration and potential Redline Stealer malware installation from an official Ukrainian government site, with similarities to previous attack campaigns.

From sophisticated zero-day exploits to novel malware campaigns, this week’s Hawkeye Security Advisory brings you actionable insights into the latest threats and how to mitigate them. The BrazenBamboo APT group is actively exploiting an unpatched zero-day vulnerability in Fortinet’s FortiClient VPN software for Windows.

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. A botnet exploits e GeoVision zero-day to compromise EoL devicesPalo Alto Networks confirmed active exploitation of recently disclosed zero-dayNSO Group used WhatsApp exploits even after Meta-owned company sued itGlove Stealer bypasses Chrome’s App