by Kastro
Paper/Archive/CVE-2024-43602

CVE-2024-43602

Microsoft Azure CycleCloud — Azure CycleCloud Remote Code Execution Vulnerability

EPSS 2%CVSS 9.9
critical.is priorityof 100
46
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 82.9.829 × 2016.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Azure CycleCloud Remote Code Execution Vulnerability

Affected

ProductAffectedFixed inSource
Azure CycleCloud8.6.3 – < 8.6.58.6.5CNA
Azure CycleCloud8.6.4 – < 8.6.58.6.5CNA
Azure CycleCloud 8.0.08.0.0 – < 8.6.58.6.5CNA
Azure CycleCloud 8.0.18.0.0 – < 8.6.58.6.5CNA
Azure CycleCloud 8.6.08.6.0 – < 8.6.58.6.5CNA
Azure CycleCloud8.6.0 – < 8.6.58.6.5CNA
Azure CycleCloud 8.0.28.0.0 – < 8.6.58.6.5CNA
Azure CycleCloud 8.1.08.1.0 – < 8.6.58.6.5CNA
Azure CycleCloud 8.2.08.2.0 – < 8.6.58.6.5CNA
Azure CycleCloud 8.2.18.2.0 – < 8.6.58.6.5CNA
Azure CycleCloud 8.2.28.2.0 – < 8.6.58.6.5CNA
Azure CycleCloud 8.4.18.4.0 – < 8.6.58.6.5CNA

Scores by source

microsoft (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorymsrc.microsoft.com/update-guide/vulnerability/CVE-2024-43602