{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2024-8956", "aliases": [], "title": "PT30X-SDI / PT30X-NDI：脆弱性情報", "summary": "PTZOptics の PT30X‑SDI/NDI カメラ（ファームウェア 6.3.40 未満）は、/cgi-bin/param.cgi へのリクエストで HTTP Authorization ヘッダーが無い場合に認証が正しく行われず、リモートの認証されていない攻撃者がユーザー名やパスワードハッシュ、設定情報を取得でき、個別の設定値を変更したりファイル全体を書き換えることができる。", "risk": "攻撃者が機密情報を取得したり設定を改ざんできるため、カメラの運用が不正に制御され、プライバシーやシステムの安全性が損なわれる可能性がある。", "product": "PT30X-SDI / PT30X-NDI", "category": "other", "component": "package", "severity": "critical", "cvss": 9.1, "cvssVersion": "3.1", "cvssSource": "VulnCheck", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "affected": [ { "product": "PT30X-SDI", "range": "< 6.3.40" }, { "product": "PT30X-NDI", "range": "< 6.3.40" } ], "fixed": [], "steps": [ "ベンダーの指示に従った緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "「CVE-2024-8956」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json", "label": "CVE：VulnCheck" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-8956", "label": "CVE公式レコード" }, { "url": "https://ptzoptics.com/firmware-changelog/", "label": "CISAが示す関連情報" }, { "url": "https://vulncheck.com/advisories/ptzoptics-insufficient-auth", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8956", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-09-17T19:59:27.205Z", "modifiedAt": "2025-11-22T12:09:58.681Z", "fetchedAt": "2026-10-24T05:07:08.753Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.", "sourceTitle": "PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "PT30X-SDI", "vendor": "PTZOptics", "versions": [ { "lessThan": "6.3.40", "status": "affected", "version": "0", "versionType": "semver" } ] }, { "defaultStatus": "unaffected", "product": "PT30X-NDI", "vendor": "PTZOptics", "versions": [ { "lessThan": "6.3.40", "status": "affected", "version": "0", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-8956", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json", "fetchedAt": "2026-10-24T05:07:08.753Z", "publishedAt": "2024-09-17T19:59:27.205Z", "modifiedAt": "2025-11-22T12:09:58.681Z", "state": "published", "provider": "VulnCheck", "title": "PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication", "descriptions": [ { "lang": "en", "value": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote, attacker to bypass authentication for the /cgi-bin/param.cgi CGI script. If combined with CVE-2024-8957, this can lead to remote code execution as root.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "PTZOptics", "product": "PT30X-SDI", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "6.3.40", "versionType": "semver", "status": "affected" } ] }, { "vendor": "PTZOptics", "product": "PT30X-NDI", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0", "lessThan": "6.3.40", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-306", "lang": "en", "description": "CWE-306 Missing Authentication for Critical Function", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 9.1, "baseSeverity": "CRITICAL", "provider": "VulnCheck", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://ptzoptics.com/firmware-changelog/", "label": "VulnCheck", "tags": [ "vendor-advisory" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/0" }, { "url": "https://vulncheck.com/advisories/ptzoptics-insufficient-auth", "label": "VulnCheck", "tags": [ "third-party-advisory" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/", "label": "CISA-ADP", "tags": [ "technical-description", "third-party-advisory", "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai", "label": "CISA-ADP", "tags": [ "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8956", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"PT30X-SDI\",\"vendor\":\"PTZOptics\",\"versions\":[{\"lessThan\":\"6.3.40\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"PT30X-NDI\",\"vendor\":\"PTZOptics\",\"versions\":[{\"lessThan\":\"6.3.40\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-306\",\"description\":\"CWE-306 Missing Authentication for Critical Function\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"NONE\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-8956:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956", "sourcePath": "retained:/originalText", "text": "PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote, attacker to bypass authentication for the /cgi-bin/param.cgi CGI script. If combined with CVE-2024-8957, this can lead to remote code execution as root.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-8956:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956", "modifiedAt": "2024-11-04T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-11-22T12:09:58.681Z", "fetchedAt": "2026-10-24T05:07:08.753Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-11-04T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "PT30X-SDI / PT30X-NDIに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:07:08.753Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "6325353e7363f474373a93afa6e66be2b8c30bd6404b279716df9200917a8235", "sourceModifiedAt": "2025-11-22T12:09:58.681Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "PTZOptics の PT30X‑SDI/NDI カメラ（ファームウェア 6.3.40 未満）は、/cgi-bin/param.cgi へのリクエストで HTTP Authorization ヘッダーが無い場合に認証が正しく行われず、リモートの認証されていない攻撃者がユーザー名やパスワードハッシュ、設定情報を取得でき、個別の設定値を変更したりファイル全体を書き換えることができる。", "risk": "攻撃者が機密情報を取得したり設定を改ざんできるため、カメラの運用が不正に制御され、プライバシーやシステムの安全性が損なわれる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象は PTZOptics の PT30X‑SDI または PT30X‑NDI カメラである。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "ファームウェアバージョンが 6.3.40 未満であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者はリモートから認証ヘッダーなしで /cgi-bin/param.cgi にリクエストを送信できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：PTZOptics / PT30X-SDI。影響ありとして記載：6.3.40未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：PTZOptics / PT30X-NDI。影響ありとして記載：6.3.40未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json" ], "evidenceIds": [ "E3" ] }, { "text": "「PT30X-SDI / PT30X-NDI」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-8956", "https://ptzoptics.com/firmware-changelog/", "https://vulncheck.com/advisories/ptzoptics-insufficient-auth", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956", "https://nvd.nist.gov/vuln/detail/CVE-2024-8956" ] } ], "actions": [ { "text": "ベンダーの指示に従った緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956" ], "evidenceIds": [ "E5" ] }, { "text": "「CVE-2024-8956」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-8956", "https://ptzoptics.com/firmware-changelog/", "https://vulncheck.com/advisories/ptzoptics-insufficient-auth", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956", "https://nvd.nist.gov/vuln/detail/CVE-2024-8956" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-8956", "https://ptzoptics.com/firmware-changelog/", "https://vulncheck.com/advisories/ptzoptics-insufficient-auth", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956", "https://nvd.nist.gov/vuln/detail/CVE-2024-8956" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-8956", "https://ptzoptics.com/firmware-changelog/", "https://vulncheck.com/advisories/ptzoptics-insufficient-auth", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956", "https://nvd.nist.gov/vuln/detail/CVE-2024-8956" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-8956", "https://ptzoptics.com/firmware-changelog/", "https://vulncheck.com/advisories/ptzoptics-insufficient-auth", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956", "https://nvd.nist.gov/vuln/detail/CVE-2024-8956" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json", "label": "CVE：VulnCheck" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-8956", "label": "CVE公式レコード" }, { "url": "https://ptzoptics.com/firmware-changelog/", "label": "CISAが示す関連情報" }, { "url": "https://vulncheck.com/advisories/ptzoptics-insufficient-auth", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8956", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json", "sourceField": "/containers/cna/title", "excerpt": "PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"PT30X-SDI\",\"vendor\":\"PTZOptics\",\"versions\":[{\"lessThan\":\"6.3.40\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8956.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"PT30X-NDI\",\"vendor\":\"PTZOptics\",\"versions\":[{\"lessThan\":\"6.3.40\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8956", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-8956\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-8956（PT30X-SDI / PT30X-NDI）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は PTZOptics の PT30X‑SDI または PT30X‑NDI カメラである。\n・ファームウェアバージョンが 6.3.40 未満であること。\n・攻撃者はリモートから認証ヘッダーなしで /cgi-bin/param.cgi にリクエストを送信できること。\n・公式の対象表：PTZOptics / PT30X-SDI。影響ありとして記載：6.3.40未満の版。\n・公式の対象表：PTZOptics / PT30X-NDI。影響ありとして記載：6.3.40未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-8956", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:07:08.753Z", "lastSuccess": "2026-10-24T05:07:08.753Z", "sourceCheckedAt": "2026-10-24T05:07:08.753Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-8957", "aliases": [], "title": "PT30X-SDI / PT30X-NDI：コード実行", "summary": "PTZOptics PT30X‑SDI/NDI カメラは、ファームウェア 6.3.40 未満において ntp_addr 設定値の検証が不十分であり、ntp_client が起動されると OS コマンドインジェクションが発生します。CVE‑2024‑8956 と組み合わせることで、リモートの認証不要な攻撃者が任意の OS コマンドを実行できる可能性があります。", "risk": "リモートの認証済み攻撃者は、細工した ntp_addr パラメータにより root 権限にエスカレーションでき、認証不要の攻撃者でも任意の OS コマンドを実行できる可能性があります。", "product": "PT30X-SDI / PT30X-NDI", "category": "other", "component": "package", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "VulnCheck", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "PT30X-SDI", "range": "< 6.3.40" }, { "product": "PT30X-NDI", "range": "< 6.3.40" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2024-8957」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json", "label": "CVE：VulnCheck" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-8957", "label": "CVE公式レコード" }, { "url": "https://ptzoptics.com/firmware-changelog/", "label": "CISAが示す関連情報" }, { "url": "https://vulncheck.com/advisories/ptzoptics-command-injection", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8957", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-09-17T20:08:25.588Z", "modifiedAt": "2025-12-27T16:47:39.385Z", "fetchedAt": "2026-10-24T05:07:18.633Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.", "sourceTitle": "PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "PT30X-SDI", "vendor": "PTZOptics", "versions": [ { "lessThan": "6.3.40", "status": "affected", "version": "0", "versionType": "semver" } ] }, { "defaultStatus": "unaffected", "product": "PT30X-NDI", "vendor": "PTZOptics", "versions": [ { "lessThan": "6.3.40", "status": "affected", "version": "0", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-8957", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json", "fetchedAt": "2026-10-24T05:07:18.633Z", "publishedAt": "2024-09-17T20:08:25.588Z", "modifiedAt": "2025-12-27T16:47:39.385Z", "state": "published", "provider": "VulnCheck", "title": "PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration", "descriptions": [ { "lang": "en", "value": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI script.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "PTZOptics", "product": "PT30X-SDI", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "6.3.40", "versionType": "semver", "status": "affected" } ] }, { "vendor": "PTZOptics", "product": "PT30X-NDI", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0", "lessThan": "6.3.40", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-78", "lang": "en", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH", "provider": "VulnCheck", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://ptzoptics.com/firmware-changelog/", "label": "VulnCheck", "tags": [ "vendor-advisory" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/0" }, { "url": "https://vulncheck.com/advisories/ptzoptics-command-injection", "label": "VulnCheck", "tags": [ "third-party-advisory" ], "provider": "VulnCheck", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/", "label": "CISA-ADP", "tags": [ "exploit", "technical-description", "third-party-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai", "label": "CISA-ADP", "tags": [], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8957", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"PT30X-SDI\",\"vendor\":\"PTZOptics\",\"versions\":[{\"lessThan\":\"6.3.40\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"PT30X-NDI\",\"vendor\":\"PTZOptics\",\"versions\":[{\"lessThan\":\"6.3.40\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-78\",\"description\":\"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.2,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-8957:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "sourcePath": "retained:/originalText", "text": "PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI script.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-8957:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "modifiedAt": "2024-11-04T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-12-27T16:47:39.385Z", "fetchedAt": "2026-10-24T05:07:18.633Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-11-04T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "PT30X-SDI / PT30X-NDIにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:07:18.633Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e9b58ae882ad280210bf2ff01554c0fd560f5cabbb5a6ec2503d2dbdbbd9e1d2", "sourceModifiedAt": "2025-12-27T16:47:39.385Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "PTZOptics PT30X‑SDI/NDI カメラは、ファームウェア 6.3.40 未満において ntp_addr 設定値の検証が不十分であり、ntp_client が起動されると OS コマンドインジェクションが発生します。CVE‑2024‑8956 と組み合わせることで、リモートの認証不要な攻撃者が任意の OS コマンドを実行できる可能性があります。", "risk": "リモートの認証済み攻撃者は、細工した ntp_addr パラメータにより root 権限にエスカレーションでき、認証不要の攻撃者でも任意の OS コマンドを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "ntp_client が起動されていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "ntp_addr 設定値が適切に検証されていないこと。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者がリモートから ntp_addr パラメータを細工できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "CVE‑2024‑8956 と組み合わせることで認証不要の攻撃者が任意コマンド実行できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "認証済み攻撃者は細工した ntp_addr により root 権限へエスカレーションできること。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "公式の対象表：PTZOptics / PT30X-SDI。影響ありとして記載：6.3.40未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：PTZOptics / PT30X-NDI。影響ありとして記載：6.3.40未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json" ], "evidenceIds": [ "E5" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957" ], "evidenceIds": [ "E8" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json" ], "evidenceIds": [ "E4" ] }, { "text": "「PT30X-SDI / PT30X-NDI」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-8957", "https://ptzoptics.com/firmware-changelog/", "https://vulncheck.com/advisories/ptzoptics-command-injection", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "https://nvd.nist.gov/vuln/detail/CVE-2024-8957" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957" ], "evidenceIds": [ "E6", "E7" ] }, { "text": "「CVE-2024-8957」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-8957", "https://ptzoptics.com/firmware-changelog/", "https://vulncheck.com/advisories/ptzoptics-command-injection", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "https://nvd.nist.gov/vuln/detail/CVE-2024-8957" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-8957", "https://ptzoptics.com/firmware-changelog/", "https://vulncheck.com/advisories/ptzoptics-command-injection", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "https://nvd.nist.gov/vuln/detail/CVE-2024-8957" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-8957", "https://ptzoptics.com/firmware-changelog/", "https://vulncheck.com/advisories/ptzoptics-command-injection", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "https://nvd.nist.gov/vuln/detail/CVE-2024-8957" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-8957", "https://ptzoptics.com/firmware-changelog/", "https://vulncheck.com/advisories/ptzoptics-command-injection", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "https://nvd.nist.gov/vuln/detail/CVE-2024-8957" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json", "label": "CVE：VulnCheck" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-8957", "label": "CVE公式レコード" }, { "url": "https://ptzoptics.com/firmware-changelog/", "label": "CISAが示す関連情報" }, { "url": "https://vulncheck.com/advisories/ptzoptics-command-injection", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8957", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json", "sourceField": "/containers/cna/title", "excerpt": "PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "sourceField": "retained:/originalText", "excerpt": "PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate privileges to root via a crafted payload with the ntp_addr parameter of the /cgi-bin/param.cgi CGI script.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"PT30X-SDI\",\"vendor\":\"PTZOptics\",\"versions\":[{\"lessThan\":\"6.3.40\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8957.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"PT30X-NDI\",\"vendor\":\"PTZOptics\",\"versions\":[{\"lessThan\":\"6.3.40\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8957", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-8957\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-8957（PT30X-SDI / PT30X-NDI）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ntp_client が起動されていること。\n・ntp_addr 設定値が適切に検証されていないこと。\n・攻撃者がリモートから ntp_addr パラメータを細工できること。\n・CVE‑2024‑8956 と組み合わせることで認証不要の攻撃者が任意コマンド実行できること。\n・認証済み攻撃者は細工した ntp_addr により root 権限へエスカレーションできること。\n・公式の対象表：PTZOptics / PT30X-SDI。影響ありとして記載：6.3.40未満の版。\n・公式の対象表：PTZOptics / PT30X-NDI。影響ありとして記載：6.3.40未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-8957", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:07:18.633Z", "lastSuccess": "2026-10-24T05:07:18.633Z", "sourceCheckedAt": "2026-10-24T05:07:18.633Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-20481", "aliases": [], "title": "Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software：サービス停止", "summary": "Cisco Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Firepower Threat Defense (FTD) ソフトウェアのリモートアクセス VPN (RAVPN) サービスにおける脆弱性により、認証されていないリモート攻撃者が大量の VPN 認証要求を送信することでリソースが枯渇し、RAVPN サービスが停止 (DoS) する可能性があります。影響を受けたデバイスでは、RAVPN サービスを復旧させるためにデバイスのリロードが必要になることがあります。VPN 以外のサービスは影響を受けません。", "risk": "RAVPN サービスが停止し、リモートアクセス VPN が利用できなくなる可能性があります。", "product": "Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software", "category": "other", "component": "package", "severity": "medium", "cvss": 5.8, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "affected": [ { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.1.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.1.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.20" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.24" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.28" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.33" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.35" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.38" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.16" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.21" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.29" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.45" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.25" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.20" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.22" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.29" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.32" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.33" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.34" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.35" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.40" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.41" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.43" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.44" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.45" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.46" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.48" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.1.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.1.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.24" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.29" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.30" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.35" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.37" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.38" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.40" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.41" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.47" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.48" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.50" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.52" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.54" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.55" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.56" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.58" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.62" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.65" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.67" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.6" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.19" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.30" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.6" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.22" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.23" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.24" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.16" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.21" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.1.28" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.19" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.23" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.19" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.27" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.38" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.42" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.48" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.55" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.57" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.61" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.20" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.30" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.33" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.1.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.46" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.53" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.55" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.56" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.4.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.4.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.4.22" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.4.24" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.22" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.24" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.27" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.28" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.31" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.20.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.20.1.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.20.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.20.2.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.20.2.21" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.6" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.7" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.8" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.10" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.11" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.9" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.12" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.13" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.14" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.15" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.16" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.17" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.18" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.5.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.5.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.7" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.7.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.7.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.6" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.7" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.8" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.9" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.10" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.11" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.12" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.13" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.14" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.15" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.16" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.17" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.18" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.1.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.2.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.6" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.6.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.6.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.4.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.5.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.6" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.7" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.5.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.8" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.8.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.3.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.3.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.3.1.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.3.1.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.4.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.4.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.4.1.1" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "「CVE-2024-20481」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-20481", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-bf-dos-vDZhLqrW", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20481", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-10-23T17:51:38.649Z", "modifiedAt": "2025-10-21T22:55:41.272Z", "fetchedAt": "2026-10-24T05:07:20.216Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of the RAVPN service.\r\n\r This vulnerability is due to resource exhaustion. An attacker could exploit this vulnerability by sending a large number of VPN authentication requests to an affected device. A successful exploit could allow the attacker to exhaust resources, resulting in a DoS of the RAVPN service on the affected device. Depending on the impact of the attack, a reload of the device may be required to restore the RAVPN service. Services that are not related to VPN are not affected.\r\n\r Cisco Talos discussed these attacks in the blog post Large-scale brute-force activity targeting VPNs, SSH services with commonly used login credentials.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "Cisco Adaptive Security Appliance (ASA) Software", "versions": [ { "version": "9.8.1", "status": "affected" }, { "version": "9.8.1.5", "status": "affected" }, { "version": "9.8.1.7", "status": "affected" }, { "version": "9.8.2", "status": "affected" }, { "version": "9.8.2.8", "status": "affected" }, { "version": "9.8.2.14", "status": "affected" }, { "version": "9.8.2.15", "status": "affected" }, { "version": "9.8.2.17", "status": "affected" }, { "version": "9.8.2.20", "status": "affected" }, { "version": "9.8.2.24", "status": "affected" }, { "version": "9.8.2.26", "status": "affected" }, { "version": "9.8.2.28", "status": "affected" }, { "version": "9.8.2.33", "status": "affected" }, { "version": "9.8.2.35", "status": "affected" }, { "version": "9.8.2.38", "status": "affected" }, { "version": "9.8.3.8", "status": "affected" }, { "version": "9.8.3.11", "status": "affected" }, { "version": "9.8.3.14", "status": "affected" }, { "version": "9.8.3.16", "status": "affected" }, { "version": "9.8.3.18", "status": "affected" }, { "version": "9.8.3.21", "status": "affected" }, { "version": "9.8.3", "status": "affected" }, { "version": "9.8.3.26", "status": "affected" }, { "version": "9.8.3.29", "status": "affected" }, { "version": "9.8.4", "status": "affected" }, { "version": "9.8.4.3", "status": "affected" }, { "version": "9.8.4.7", "status": "affected" }, { "version": "9.8.4.8", "status": "affected" }, { "version": "9.8.4.10", "status": "affected" }, { "version": "9.8.4.12", "status": "affected" }, { "version": "9.8.4.15", "status": "affected" }, { "version": "9.8.4.17", "status": "affected" }, { "version": "9.8.2.45", "status": "affected" }, { "version": "9.8.4.25", "status": "affected" }, { "version": "9.8.4.20", "status": "affected" }, { "version": "9.8.4.22", "status": "affected" }, { "version": "9.8.4.26", "status": "affected" }, { "version": "9.8.4.29", "status": "affected" }, { "version": "9.8.4.32", "status": "affected" }, { "version": "9.8.4.33", "status": "affected" }, { "version": "9.8.4.34", "status": "affected" }, { "version": "9.8.4.35", "status": "affected" }, { "version": "9.8.4.39", "status": "affected" }, { "version": "9.8.4.40", "status": "affected" }, { "version": "9.8.4.41", "status": "affected" }, { "version": "9.8.4.43", "status": "affected" }, { "version": "9.8.4.44", "status": "affected" }, { "version": "9.8.4.45", "status": "affected" }, { "version": "9.8.4.46", "status": "affected" }, { "version": "9.8.4.48", "status": "affected" }, { "version": "9.12.1", "status": "affected" }, { "version": "9.12.1.2", "status": "affected" }, { "version": "9.12.1.3", "status": "affected" }, { "version": "9.12.2", "status": "affected" }, { "version": "9.12.2.4", "status": "affected" }, { "version": "9.12.2.5", "status": "affected" }, { "version": "9.12.2.9", "status": "affected" }, { "version": "9.12.3", "status": "affected" }, { "version": "9.12.3.2", "status": "affected" }, { "version": "9.12.3.7", "status": "affected" }, { "version": "9.12.4", "status": "affected" }, { "version": "9.12.3.12", "status": "affected" }, { "version": "9.12.3.9", "status": "affected" }, { "version": "9.12.2.1", "status": "affected" }, { "version": "9.12.4.2", "status": "affected" }, { "version": "9.12.4.4", "status": "affected" }, { "version": "9.12.4.7", "status": "affected" }, { "version": "9.12.4.10", "status": "affected" }, { "version": "9.12.4.13", "status": "affected" }, { "version": "9.12.4.8", "status": "affected" }, { "version": "9.12.4.18", "status": "affected" }, { "version": "9.12.4.24", "status": "affected" }, { "version": "9.12.4.26", "status": "affected" }, { "version": "9.12.4.29", "status": "affected" }, { "version": "9.12.4.30", "status": "affected" }, { "version": "9.12.4.35", "status": "affected" }, { "version": "9.12.4.37", "status": "affected" }, { "version": "9.12.4.38", "status": "affected" }, { "version": "9.12.4.39", "status": "affected" }, { "version": "9.12.4.40", "status": "affected" }, { "version": "9.12.4.41", "status": "affected" }, { "version": "9.12.4.47", "status": "affected" }, { "version": "9.12.4.48", "status": "affected" }, { "version": "9.12.4.50", "status": "affected" }, { "version": "9.12.4.52", "status": "affected" }, { "version": "9.12.4.54", "status": "affected" }, { "version": "9.12.4.55", "status": "affected" }, { "version": "9.12.4.56", "status": "affected" }, { "version": "9.12.4.58", "status": "affected" }, { "version": "9.12.4.62", "status": "affected" }, { "version": "9.12.4.65", "status": "affected" }, { "version": "9.12.4.67", "status": "affected" }, { "version": "9.14.1", "status": "affected" }, { "version": "9.14.1.10", "status": "affected" }, { "version": "9.14.1.6", "status": "affected" }, { "version": "9.14.1.15", "status": "affected" }, { "version": "9.14.1.19", "status": "affected" }, { "version": "9.14.1.30", "status": "affected" }, { "version": "9.14.2", "status": "affected" }, { "version": "9.14.2.4", "status": "affected" }, { "version": "9.14.2.8", "status": "affected" }, { "version": "9.14.2.13", "status": "affected" }, { "version": "9.14.2.15", "status": "affected" }, { "version": "9.14.3", "status": "affected" }, { "version": "9.14.3.1", "status": "affected" }, { "version": "9.14.3.9", "status": "affected" }, { "version": "9.14.3.11", "status": "affected" }, { "version": "9.14.3.13", "status": "affected" }, { "version": "9.14.3.18", "status": "affected" }, { "version": "9.14.3.15", "status": "affected" }, { "version": "9.14.4", "status": "affected" }, { "version": "9.14.4.6", "status": "affected" }, { "version": "9.14.4.7", "status": "affected" }, { "version": "9.14.4.12", "status": "affected" }, { "version": "9.14.4.13", "status": "affected" }, { "version": "9.14.4.14", "status": "affected" }, { "version": "9.14.4.15", "status": "affected" }, { "version": "9.14.4.17", "status": "affected" }, { "version": "9.14.4.22", "status": "affected" }, { "version": "9.14.4.23", "status": "affected" }, { "version": "9.14.4.24", "status": "affected" }, { "version": "9.15.1", "status": "affected" }, { "version": "9.15.1.7", "status": "affected" }, { "version": "9.15.1.10", "status": "affected" }, { "version": "9.15.1.15", "status": "affected" }, { "version": "9.15.1.16", "status": "affected" }, { "version": "9.15.1.17", "status": "affected" }, { "version": "9.15.1.1", "status": "affected" }, { "version": "9.15.1.21", "status": "affected" }, { "version": "9.16.1", "status": "affected" }, { "version": "9.16.1.28", "status": "affected" }, { "version": "9.16.2", "status": "affected" }, { "version": "9.16.2.3", "status": "affected" }, { "version": "9.16.2.7", "status": "affected" }, { "version": "9.16.2.11", "status": "affected" }, { "version": "9.16.2.13", "status": "affected" }, { "version": "9.16.2.14", "status": "affected" }, { "version": "9.16.3", "status": "affected" }, { "version": "9.16.3.3", "status": "affected" }, { "version": "9.16.3.14", "status": "affected" }, { "version": "9.16.3.15", "status": "affected" }, { "version": "9.16.3.19", "status": "affected" }, { "version": "9.16.3.23", "status": "affected" }, { "version": "9.16.4", "status": "affected" }, { "version": "9.16.4.9", "status": "affected" }, { "version": "9.16.4.14", "status": "affected" }, { "version": "9.16.4.18", "status": "affected" }, { "version": "9.16.4.19", "status": "affected" }, { "version": "9.16.4.27", "status": "affected" }, { "version": "9.16.4.38", "status": "affected" }, { "version": "9.16.4.39", "status": "affected" }, { "version": "9.16.4.42", "status": "affected" }, { "version": "9.16.4.48", "status": "affected" }, { "version": "9.16.4.55", "status": "affected" }, { "version": "9.16.4.57", "status": "affected" }, { "version": "9.16.4.61", "status": "affected" }, { "version": "9.17.1", "status": "affected" }, { "version": "9.17.1.7", "status": "affected" }, { "version": "9.17.1.9", "status": "affected" }, { "version": "9.17.1.10", "status": "affected" }, { "version": "9.17.1.11", "status": "affected" }, { "version": "9.17.1.13", "status": "affected" }, { "version": "9.17.1.15", "status": "affected" }, { "version": "9.17.1.20", "status": "affected" }, { "version": "9.17.1.30", "status": "affected" }, { "version": "9.17.1.33", "status": "affected" }, { "version": "9.17.1.39", "status": "affected" }, { "version": "9.18.1", "status": "affected" }, { "version": "9.18.1.3", "status": "affected" }, { "version": "9.18.2", "status": "affected" }, { "version": "9.18.2.5", "status": "affected" }, { "version": "9.18.2.7", "status": "affected" }, { "version": "9.18.2.8", "status": "affected" }, { "version": "9.18.3", "status": "affected" }, { "version": "9.18.3.39", "status": "affected" }, { "version": "9.18.3.46", "status": "affected" }, { "version": "9.18.3.53", "status": "affected" }, { "version": "9.18.3.55", "status": "affected" }, { "version": "9.18.3.56", "status": "affected" }, { "version": "9.18.4", "status": "affected" }, { "version": "9.18.4.5", "status": "affected" }, { "version": "9.18.4.8", "status": "affected" }, { "version": "9.18.4.22", "status": "affected" }, { "version": "9.18.4.24", "status": "affected" }, { "version": "9.19.1", "status": "affected" }, { "version": "9.19.1.5", "status": "affected" }, { "version": "9.19.1.9", "status": "affected" }, { "version": "9.19.1.12", "status": "affected" }, { "version": "9.19.1.18", "status": "affected" }, { "version": "9.19.1.22", "status": "affected" }, { "version": "9.19.1.24", "status": "affected" }, { "version": "9.19.1.27", "status": "affected" }, { "version": "9.19.1.28", "status": "affected" }, { "version": "9.19.1.31", "status": "affected" }, { "version": "9.20.1", "status": "affected" }, { "version": "9.20.1.5", "status": "affected" }, { "version": "9.20.2", "status": "affected" }, { "version": "9.20.2.10", "status": "affected" }, { "version": "9.20.2.21", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Firepower Threat Defense Software", "versions": [ { "version": "6.2.3", "status": "affected" }, { "version": "6.2.3.1", "status": "affected" }, { "version": "6.2.3.2", "status": "affected" }, { "version": "6.2.3.3", "status": "affected" }, { "version": "6.2.3.4", "status": "affected" }, { "version": "6.2.3.5", "status": "affected" }, { "version": "6.2.3.6", "status": "affected" }, { "version": "6.2.3.7", "status": "affected" }, { "version": "6.2.3.8", "status": "affected" }, { "version": "6.2.3.10", "status": "affected" }, { "version": "6.2.3.11", "status": "affected" }, { "version": "6.2.3.9", "status": "affected" }, { "version": "6.2.3.12", "status": "affected" }, { "version": "6.2.3.13", "status": "affected" }, { "version": "6.2.3.14", "status": "affected" }, { "version": "6.2.3.15", "status": "affected" }, { "version": "6.2.3.16", "status": "affected" }, { "version": "6.2.3.17", "status": "affected" }, { "version": "6.2.3.18", "status": "affected" }, { "version": "6.6.0", "status": "affected" }, { "version": "6.6.0.1", "status": "affected" }, { "version": "6.6.1", "status": "affected" }, { "version": "6.6.3", "status": "affected" }, { "version": "6.6.4", "status": "affected" }, { "version": "6.6.5", "status": "affected" }, { "version": "6.6.5.1", "status": "affected" }, { "version": "6.6.5.2", "status": "affected" }, { "version": "6.6.7", "status": "affected" }, { "version": "6.6.7.1", "status": "affected" }, { "version": "6.6.7.2", "status": "affected" }, { "version": "6.4.0", "status": "affected" }, { "version": "6.4.0.1", "status": "affected" }, { "version": "6.4.0.3", "status": "affected" }, { "version": "6.4.0.2", "status": "affected" }, { "version": "6.4.0.4", "status": "affected" }, { "version": "6.4.0.5", "status": "affected" }, { "version": "6.4.0.6", "status": "affected" }, { "version": "6.4.0.7", "status": "affected" }, { "version": "6.4.0.8", "status": "affected" }, { "version": "6.4.0.9", "status": "affected" }, { "version": "6.4.0.10", "status": "affected" }, { "version": "6.4.0.11", "status": "affected" }, { "version": "6.4.0.12", "status": "affected" }, { "version": "6.4.0.13", "status": "affected" }, { "version": "6.4.0.14", "status": "affected" }, { "version": "6.4.0.15", "status": "affected" }, { "version": "6.4.0.16", "status": "affected" }, { "version": "6.4.0.17", "status": "affected" }, { "version": "6.4.0.18", "status": "affected" }, { "version": "6.7.0", "status": "affected" }, { "version": "6.7.0.1", "status": "affected" }, { "version": "6.7.0.2", "status": "affected" }, { "version": "6.7.0.3", "status": "affected" }, { "version": "7.0.0", "status": "affected" }, { "version": "7.0.0.1", "status": "affected" }, { "version": "7.0.1", "status": "affected" }, { "version": "7.0.1.1", "status": "affected" }, { "version": "7.0.2", "status": "affected" }, { "version": "7.0.2.1", "status": "affected" }, { "version": "7.0.3", "status": "affected" }, { "version": "7.0.4", "status": "affected" }, { "version": "7.0.5", "status": "affected" }, { "version": "7.0.6", "status": "affected" }, { "version": "7.0.6.1", "status": "affected" }, { "version": "7.0.6.2", "status": "affected" }, { "version": "7.1.0", "status": "affected" }, { "version": "7.1.0.1", "status": "affected" }, { "version": "7.1.0.2", "status": "affected" }, { "version": "7.1.0.3", "status": "affected" }, { "version": "7.2.0", "status": "affected" }, { "version": "7.2.0.1", "status": "affected" }, { "version": "7.2.1", "status": "affected" }, { "version": "7.2.2", "status": "affected" }, { "version": "7.2.3", "status": "affected" }, { "version": "7.2.4", "status": "affected" }, { "version": "7.2.4.1", "status": "affected" }, { "version": "7.2.5", "status": "affected" }, { "version": "7.2.5.1", "status": "affected" }, { "version": "7.2.6", "status": "affected" }, { "version": "7.2.7", "status": "affected" }, { "version": "7.2.5.2", "status": "affected" }, { "version": "7.2.8", "status": "affected" }, { "version": "7.2.8.1", "status": "affected" }, { "version": "7.3.0", "status": "affected" }, { "version": "7.3.1", "status": "affected" }, { "version": "7.3.1.1", "status": "affected" }, { "version": "7.3.1.2", "status": "affected" }, { "version": "7.4.0", "status": "affected" }, { "version": "7.4.1", "status": "affected" }, { "version": "7.4.1.1", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-20481", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json", "fetchedAt": "2026-10-24T05:07:20.216Z", "publishedAt": "2024-10-23T17:51:38.649Z", "modifiedAt": "2025-10-21T22:55:41.272Z", "state": "published", "provider": "cisco", "title": "", "descriptions": [ { "lang": "en", "value": "A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of the RAVPN service.\r\n\r This vulnerability is due to resource exhaustion. An attacker could exploit this vulnerability by sending a large number of VPN authentication requests to an affected device. A successful exploit could allow the attacker to exhaust resources, resulting in a DoS of the RAVPN service on the affected device. Depending on the impact of the attack, a reload of the device may be required to restore the RAVPN service. Services that are not related to VPN are not affected.\r\n\r Cisco Talos discussed these attacks in the blog post Large-scale brute-force activity targeting VPNs, SSH services with commonly used login credentials.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release of resource after effective lifetime vulnerability that could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) of the RAVPN service.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Cisco", "product": "Cisco Adaptive Security Appliance (ASA) Software", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "9.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "9.8.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "9.8.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "9.8.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "9.8.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "9.8.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "9.8.2.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "9.8.2.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "9.8.2.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "9.8.2.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "9.8.2.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "9.8.2.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "9.8.2.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "9.8.2.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "9.8.2.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "9.8.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "9.8.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "9.8.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "9.8.3.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "9.8.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "9.8.3.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "9.8.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "9.8.3.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "9.8.3.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "9.8.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "9.8.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "9.8.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "9.8.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "9.8.4.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "9.8.4.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "9.8.4.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "9.8.4.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "9.8.2.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "9.8.4.25", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "9.8.4.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "9.8.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "9.8.4.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "9.8.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "9.8.4.32", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "9.8.4.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "9.8.4.34", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "9.8.4.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "9.8.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "9.8.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "9.8.4.41", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "9.8.4.43", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "9.8.4.44", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "9.8.4.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "9.8.4.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "9.8.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "9.12.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "9.12.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "9.12.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "9.12.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "9.12.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "9.12.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "9.12.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "9.12.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "9.12.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "9.12.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "9.12.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "9.12.3.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "9.12.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "9.12.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "9.12.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "9.12.4.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "9.12.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "9.12.4.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "9.12.4.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "9.12.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "9.12.4.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "9.12.4.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "9.12.4.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "9.12.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "9.12.4.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "9.12.4.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "9.12.4.37", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "9.12.4.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "9.12.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "9.12.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "9.12.4.41", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "9.12.4.47", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "9.12.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "9.12.4.50", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "9.12.4.52", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "9.12.4.54", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "9.12.4.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "9.12.4.56", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "9.12.4.58", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "9.12.4.62", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "9.12.4.65", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "9.12.4.67", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "9.14.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "9.14.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "9.14.1.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "9.14.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "9.14.1.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "9.14.1.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "9.14.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "9.14.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "9.14.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "9.14.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "9.14.2.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "9.14.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "9.14.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "9.14.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "9.14.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "9.14.3.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "9.14.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "9.14.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "9.14.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "9.14.4.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "9.14.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "9.14.4.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "9.14.4.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "9.14.4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "9.14.4.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "9.14.4.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "9.14.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "9.14.4.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "9.14.4.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "9.15.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "9.15.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "9.15.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "9.15.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "9.15.1.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "9.15.1.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "9.15.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "9.15.1.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "9.16.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "9.16.1.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "9.16.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "9.16.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "9.16.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "9.16.2.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "9.16.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "9.16.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "9.16.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "9.16.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "9.16.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "9.16.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "9.16.3.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "9.16.3.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "9.16.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "9.16.4.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "9.16.4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "9.16.4.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "9.16.4.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "9.16.4.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "9.16.4.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "9.16.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "9.16.4.42", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "9.16.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/153", "version": "9.16.4.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/154", "version": "9.16.4.57", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/155", "version": "9.16.4.61", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/156", "version": "9.17.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/157", "version": "9.17.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/158", "version": "9.17.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/159", "version": "9.17.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/160", "version": "9.17.1.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/161", "version": "9.17.1.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/162", "version": "9.17.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/163", "version": "9.17.1.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/164", "version": "9.17.1.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/165", "version": "9.17.1.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/166", "version": "9.17.1.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/167", "version": "9.18.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/168", "version": "9.18.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/169", "version": "9.18.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/170", "version": "9.18.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/171", "version": "9.18.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/172", "version": "9.18.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/173", "version": "9.18.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/174", "version": "9.18.3.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/175", "version": "9.18.3.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/176", "version": "9.18.3.53", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/177", "version": "9.18.3.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/178", "version": "9.18.3.56", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/179", "version": "9.18.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/180", "version": "9.18.4.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/181", "version": "9.18.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/182", "version": "9.18.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/183", "version": "9.18.4.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/184", "version": "9.19.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/185", "version": "9.19.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/186", "version": "9.19.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/187", "version": "9.19.1.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/188", "version": "9.19.1.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/189", "version": "9.19.1.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/190", "version": "9.19.1.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/191", "version": "9.19.1.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/192", "version": "9.19.1.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/193", "version": "9.19.1.31", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/194", "version": "9.20.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/195", "version": "9.20.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/196", "version": "9.20.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/197", "version": "9.20.2.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/198", "version": "9.20.2.21", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Firepower Threat Defense Software", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "6.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "6.2.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "6.2.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "6.2.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/4", "version": "6.2.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/5", "version": "6.2.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/6", "version": "6.2.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/7", "version": "6.2.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/8", "version": "6.2.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/9", "version": "6.2.3.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/10", "version": "6.2.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/11", "version": "6.2.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/12", "version": "6.2.3.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/13", "version": "6.2.3.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/14", "version": "6.2.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/15", "version": "6.2.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/16", "version": "6.2.3.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/17", "version": "6.2.3.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/18", "version": "6.2.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/19", "version": "6.6.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/20", "version": "6.6.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/21", "version": "6.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/22", "version": "6.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/23", "version": "6.6.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/24", "version": "6.6.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/25", "version": "6.6.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/26", "version": "6.6.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/27", "version": "6.6.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/28", "version": "6.6.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/29", "version": "6.6.7.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/30", "version": "6.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/31", "version": "6.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/32", "version": "6.4.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/33", "version": "6.4.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/34", "version": "6.4.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/35", "version": "6.4.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/36", "version": "6.4.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/37", "version": "6.4.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/38", "version": "6.4.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/39", "version": "6.4.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/40", "version": "6.4.0.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/41", "version": "6.4.0.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/42", "version": "6.4.0.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/43", "version": "6.4.0.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/44", "version": "6.4.0.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/45", "version": "6.4.0.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/46", "version": "6.4.0.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/47", "version": "6.4.0.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/48", "version": "6.4.0.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/49", "version": "6.7.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/50", "version": "6.7.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/51", "version": "6.7.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/52", "version": "6.7.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/53", "version": "7.0.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/54", "version": "7.0.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/55", "version": "7.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/56", "version": "7.0.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/57", "version": "7.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/58", "version": "7.0.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/59", "version": "7.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/60", "version": "7.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/61", "version": "7.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/62", "version": "7.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/63", "version": "7.0.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/64", "version": "7.0.6.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/65", "version": "7.1.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/66", "version": "7.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/67", "version": "7.1.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/68", "version": "7.1.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/69", "version": "7.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/70", "version": "7.2.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/71", "version": "7.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/72", "version": "7.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/73", "version": "7.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/74", "version": "7.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/75", "version": "7.2.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/76", "version": "7.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/77", "version": "7.2.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/78", "version": "7.2.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/79", "version": "7.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/80", "version": "7.2.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/81", "version": "7.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/82", "version": "7.2.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/83", "version": "7.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/84", "version": "7.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/85", "version": "7.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/86", "version": "7.3.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/87", "version": "7.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/88", "version": "7.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/89", "version": "7.4.1.1", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is aware of malicious use of the vulnerability that is described in this advisory.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-772", "lang": "en", "description": "Missing Release of Resource after Effective Lifetime", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "baseScore": 5.8, "baseSeverity": "MEDIUM", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-bf-dos-vDZhLqrW", "label": "cisco-sa-asaftd-bf-dos-vDZhLqrW", "tags": [], "provider": "cisco", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20481", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Adaptive Security Appliance (ASA) Software\",\"versions\":[{\"version\":\"9.8.1\",\"status\":\"affected\"},{\"version\":\"9.8.1.5\",\"status\":\"affected\"},{\"version\":\"9.8.1.7\",\"status\":\"affected\"},{\"version\":\"9.8.2\",\"status\":\"affected\"},{\"version\":\"9.8.2.8\",\"status\":\"affected\"},{\"version\":\"9.8.2.14\",\"status\":\"affected\"},{\"version\":\"9.8.2.15\",\"status\":\"affected\"},{\"version\":\"9.8.2.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.20\",\"status\":\"affected\"},{\"version\":\"9.8.2.24\",\"status\":\"affected\"},{\"version\":\"9.8.2.26\",\"status\":\"affected\"},{\"version\":\"9.8.2.28\",\"status\":\"affected\"},{\"version\":\"9.8.2.33\",\"status\":\"affected\"},{\"version\":\"9.8.2.35\",\"status\":\"affected\"},{\"version\":\"9.8.2.38\",\"status\":\"affected\"},{\"version\":\"9.8.3.8\",\"status\":\"affected\"},{\"version\":\"9.8.3.11\",\"status\":\"affected\"},{\"version\":\"9.8.3.14\",\"status\":\"affected\"},{\"version\":\"9.8.3.16\",\"status\":\"affected\"},{\"version\":\"9.8.3.18\",\"status\":\"affected\"},{\"version\":\"9.8.3.21\",\"status\":\"affected\"},{\"version\":\"9.8.3\",\"status\":\"affected\"},{\"version\":\"9.8.3.26\",\"status\":\"affected\"},{\"version\":\"9.8.3.29\",\"status\":\"affected\"},{\"version\":\"9.8.4\",\"status\":\"affected\"},{\"version\":\"9.8.4.3\",\"status\":\"affected\"},{\"version\":\"9.8.4.7\",\"status\":\"affected\"},{\"version\":\"9.8.4.8\",\"status\":\"affected\"},{\"version\":\"9.8.4.10\",\"status\":\"affected\"},{\"version\":\"9.8.4.12\",\"status\":\"affected\"},{\"version\":\"9.8.4.15\",\"status\":\"affected\"},{\"version\":\"9.8.4.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.25\",\"status\":\"affected\"},{\"version\":\"9.8.4.20\",\"status\":\"affected\"},{\"version\":\"9.8.4.22\",\"status\":\"affected\"},{\"version\":\"9.8.4.26\",\"status\":\"affected\"},{\"version\":\"9.8.4.29\",\"status\":\"affected\"},{\"version\":\"9.8.4.32\",\"status\":\"affected\"},{\"version\":\"9.8.4.33\",\"status\":\"affected\"},{\"version\":\"9.8.4.34\",\"status\":\"affected\"},{\"version\":\"9.8.4.35\",\"status\":\"affected\"},{\"version\":\"9.8.4.39\",\"status\":\"affected\"},{\"version\":\"9.8.4.40\",\"status\":\"affected\"},{\"version\":\"9.8.4.41\",\"status\":\"affected\"},{\"version\":\"9.8.4.43\",\"status\":\"affected\"},{\"version\":\"9.8.4.44\",\"status\":\"affected\"},{\"version\":\"9.8.4.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.46\",\"status\":\"affected\"},{\"version\":\"9.8.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.1\",\"status\":\"affected\"},{\"version\":\"9.12.1.2\",\"status\":\"affected\"},{\"version\":\"9.12.1.3\",\"status\":\"affected\"},{\"version\":\"9.12.2\",\"status\":\"affected\"},{\"version\":\"9.12.2.4\",\"status\":\"affected\"},{\"version\":\"9.12.2.5\",\"status\":\"affected\"},{\"version\":\"9.12.2.9\",\"status\":\"affected\"},{\"version\":\"9.12.3\",\"status\":\"affected\"},{\"version\":\"9.12.3.2\",\"status\":\"affected\"},{\"version\":\"9.12.3.7\",\"status\":\"affected\"},{\"version\":\"9.12.4\",\"status\":\"affected\"},{\"version\":\"9.12.3.12\",\"status\":\"affected\"},{\"version\":\"9.12.3.9\",\"status\":\"affected\"},{\"version\":\"9.12.2.1\",\"status\":\"affected\"},{\"version\":\"9.12.4.2\",\"status\":\"affected\"},{\"version\":\"9.12.4.4\",\"status\":\"affected\"},{\"version\":\"9.12.4.7\",\"status\":\"affected\"},{\"version\":\"9.12.4.10\",\"status\":\"affected\"},{\"version\":\"9.12.4.13\",\"status\":\"affected\"},{\"version\":\"9.12.4.8\",\"status\":\"affected\"},{\"version\":\"9.12.4.18\",\"status\":\"affected\"},{\"version\":\"9.12.4.24\",\"status\":\"affected\"},{\"version\":\"9.12.4.26\",\"status\":\"affected\"},{\"version\":\"9.12.4.29\",\"status\":\"affected\"},{\"version\":\"9.12.4.30\",\"status\":\"affected\"},{\"version\":\"9.12.4.35\",\"status\":\"affected\"},{\"version\":\"9.12.4.37\",\"status\":\"affected\"},{\"version\":\"9.12.4.38\",\"status\":\"affected\"},{\"version\":\"9.12.4.39\",\"status\":\"affected\"},{\"version\":\"9.12.4.40\",\"status\":\"affected\"},{\"version\":\"9.12.4.41\",\"status\":\"affected\"},{\"version\":\"9.12.4.47\",\"status\":\"affected\"},{\"version\":\"9.12.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.4.50\",\"status\":\"affected\"},{\"version\":\"9.12.4.52\",\"status\":\"affected\"},{\"version\":\"9.12.4.54\",\"status\":\"affected\"},{\"version\":\"9.12.4.55\",\"status\":\"affected\"},{\"version\":\"9.12.4.56\",\"status\":\"affected\"},{\"version\":\"9.12.4.58\",\"status\":\"affected\"},{\"version\":\"9.12.4.62\",\"status\":\"affected\"},{\"version\":\"9.12.4.65\",\"status\":\"affected\"},{\"version\":\"9.12.4.67\",\"status\":\"affected\"},{\"version\":\"9.14.1\",\"status\":\"affected\"},{\"version\":\"9.14.1.10\",\"status\":\"affected\"},{\"version\":\"9.14.1.6\",\"status\":\"affected\"},{\"version\":\"9.14.1.15\",\"status\":\"affected\"},{\"version\":\"9.14.1.19\",\"status\":\"affected\"},{\"version\":\"9.14.1.30\",\"status\":\"affected\"},{\"version\":\"9.14.2\",\"status\":\"affected\"},{\"version\":\"9.14.2.4\",\"status\":\"affected\"},{\"version\":\"9.14.2.8\",\"status\":\"affected\"},{\"version\":\"9.14.2.13\",\"status\":\"affected\"},{\"version\":\"9.14.2.15\",\"status\":\"affected\"},{\"version\":\"9.14.3\",\"status\":\"affected\"},{\"version\":\"9.14.3.1\",\"status\":\"affected\"},{\"version\":\"9.14.3.9\",\"status\":\"affected\"},{\"version\":\"9.14.3.11\",\"status\":\"affected\"},{\"version\":\"9.14.3.13\",\"status\":\"affected\"},{\"version\":\"9.14.3.18\",\"status\":\"affected\"},{\"version\":\"9.14.3.15\",\"status\":\"affected\"},{\"version\":\"9.14.4\",\"status\":\"affected\"},{\"version\":\"9.14.4.6\",\"status\":\"affected\"},{\"version\":\"9.14.4.7\",\"status\":\"affected\"},{\"version\":\"9.14.4.12\",\"status\":\"affected\"},{\"version\":\"9.14.4.13\",\"status\":\"affected\"},{\"version\":\"9.14.4.14\",\"status\":\"affected\"},{\"version\":\"9.14.4.15\",\"status\":\"affected\"},{\"version\":\"9.14.4.17\",\"status\":\"affected\"},{\"version\":\"9.14.4.22\",\"status\":\"affected\"},{\"version\":\"9.14.4.23\",\"status\":\"affected\"},{\"version\":\"9.14.4.24\",\"status\":\"affected\"},{\"version\":\"9.15.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.7\",\"status\":\"affected\"},{\"version\":\"9.15.1.10\",\"status\":\"affected\"},{\"version\":\"9.15.1.15\",\"status\":\"affected\"},{\"version\":\"9.15.1.16\",\"status\":\"affected\"},{\"version\":\"9.15.1.17\",\"status\":\"affected\"},{\"version\":\"9.15.1.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.21\",\"status\":\"affected\"},{\"version\":\"9.16.1\",\"status\":\"affected\"},{\"version\":\"9.16.1.28\",\"status\":\"affected\"},{\"version\":\"9.16.2\",\"status\":\"affected\"},{\"version\":\"9.16.2.3\",\"status\":\"affected\"},{\"version\":\"9.16.2.7\",\"status\":\"affected\"},{\"version\":\"9.16.2.11\",\"status\":\"affected\"},{\"version\":\"9.16.2.13\",\"status\":\"affected\"},{\"version\":\"9.16.2.14\",\"status\":\"affected\"},{\"version\":\"9.16.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.14\",\"status\":\"affected\"},{\"version\":\"9.16.3.15\",\"status\":\"affected\"},{\"version\":\"9.16.3.19\",\"status\":\"affected\"},{\"version\":\"9.16.3.23\",\"status\":\"affected\"},{\"version\":\"9.16.4\",\"status\":\"affected\"},{\"version\":\"9.16.4.9\",\"status\":\"affected\"},{\"version\":\"9.16.4.14\",\"status\":\"affected\"},{\"version\":\"9.16.4.18\",\"status\":\"affected\"},{\"version\":\"9.16.4.19\",\"status\":\"affected\"},{\"version\":\"9.16.4.27\",\"status\":\"affected\"},{\"version\":\"9.16.4.38\",\"status\":\"affected\"},{\"version\":\"9.16.4.39\",\"status\":\"affected\"},{\"version\":\"9.16.4.42\",\"status\":\"affected\"},{\"version\":\"9.16.4.48\",\"status\":\"affected\"},{\"version\":\"9.16.4.55\",\"status\":\"affected\"},{\"version\":\"9.16.4.57\",\"status\":\"affected\"},{\"version\":\"9.16.4.61\",\"status\":\"affected\"},{\"version\":\"9.17.1\",\"status\":\"affected\"},{\"version\":\"9.17.1.7\",\"status\":\"affected\"},{\"version\":\"9.17.1.9\",\"status\":\"affected\"},{\"version\":\"9.17.1.10\",\"status\":\"affected\"},{\"version\":\"9.17.1.11\",\"status\":\"affected\"},{\"version\":\"9.17.1.13\",\"status\":\"affected\"},{\"version\":\"9.17.1.15\",\"status\":\"affected\"},{\"version\":\"9.17.1.20\",\"status\":\"affected\"},{\"version\":\"9.17.1.30\",\"status\":\"affected\"},{\"version\":\"9.17.1.33\",\"status\":\"affected\"},{\"version\":\"9.17.1.39\",\"status\":\"affected\"},{\"version\":\"9.18.1\",\"status\":\"affected\"},{\"version\":\"9.18.1.3\",\"status\":\"affected\"},{\"version\":\"9.18.2\",\"status\":\"affected\"},{\"version\":\"9.18.2.5\",\"status\":\"affected\"},{\"version\":\"9.18.2.7\",\"status\":\"affected\"},{\"version\":\"9.18.2.8\",\"status\":\"affected\"},{\"version\":\"9.18.3\",\"status\":\"affected\"},{\"version\":\"9.18.3.39\",\"status\":\"affected\"},{\"version\":\"9.18.3.46\",\"status\":\"affected\"},{\"version\":\"9.18.3.53\",\"status\":\"affected\"},{\"version\":\"9.18.3.55\",\"status\":\"affected\"},{\"version\":\"9.18.3.56\",\"status\":\"affected\"},{\"version\":\"9.18.4\",\"status\":\"affected\"},{\"version\":\"9.18.4.5\",\"status\":\"affected\"},{\"version\":\"9.18.4.8\",\"status\":\"affected\"},{\"version\":\"9.18.4.22\",\"status\":\"affected\"},{\"version\":\"9.18.4.24\",\"status\":\"affected\"},{\"version\":\"9.19.1\",\"status\":\"affected\"},{\"version\":\"9.19.1.5\",\"status\":\"affected\"},{\"version\":\"9.19.1.9\",\"status\":\"affected\"},{\"version\":\"9.19.1.12\",\"status\":\"affected\"},{\"version\":\"9.19.1.18\",\"status\":\"affected\"},{\"version\":\"9.19.1.22\",\"status\":\"affected\"},{\"version\":\"9.19.1.24\",\"status\":\"affected\"},{\"version\":\"9.19.1.27\",\"status\":\"affected\"},{\"version\":\"9.19.1.28\",\"status\":\"affected\"},{\"version\":\"9.19.1.31\",\"status\":\"affected\"},{\"version\":\"9.20.1\",\"status\":\"affected\"},{\"version\":\"9.20.1.5\",\"status\":\"affected\"},{\"version\":\"9.20.2\",\"status\":\"affected\"},{\"version\":\"9.20.2.10\",\"status\":\"affected\"},{\"version\":\"9.20.2.21\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Firepower Threat Defense Software\",\"versions\":[{\"version\":\"6.2.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.1\",\"status\":\"affected\"},{\"version\":\"6.2.3.2\",\"status\":\"affected\"},{\"version\":\"6.2.3.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.4\",\"status\":\"affected\"},{\"version\":\"6.2.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.3.6\",\"status\":\"affected\"},{\"version\":\"6.2.3.7\",\"status\":\"affected\"},{\"version\":\"6.2.3.8\",\"status\":\"affected\"},{\"version\":\"6.2.3.10\",\"status\":\"affected\"},{\"version\":\"6.2.3.11\",\"status\":\"affected\"},{\"version\":\"6.2.3.9\",\"status\":\"affected\"},{\"version\":\"6.2.3.12\",\"status\":\"affected\"},{\"version\":\"6.2.3.13\",\"status\":\"affected\"},{\"version\":\"6.2.3.14\",\"status\":\"affected\"},{\"version\":\"6.2.3.15\",\"status\":\"affected\"},{\"version\":\"6.2.3.16\",\"status\":\"affected\"},{\"version\":\"6.2.3.17\",\"status\":\"affected\"},{\"version\":\"6.2.3.18\",\"status\":\"affected\"},{\"version\":\"6.6.0\",\"status\":\"affected\"},{\"version\":\"6.6.0.1\",\"status\":\"affected\"},{\"version\":\"6.6.1\",\"status\":\"affected\"},{\"version\":\"6.6.3\",\"status\":\"affected\"},{\"version\":\"6.6.4\",\"status\":\"affected\"},{\"version\":\"6.6.5\",\"status\":\"affected\"},{\"version\":\"6.6.5.1\",\"status\":\"affected\"},{\"version\":\"6.6.5.2\",\"status\":\"affected\"},{\"version\":\"6.6.7\",\"status\":\"affected\"},{\"version\":\"6.6.7.1\",\"status\":\"affected\"},{\"version\":\"6.6.7.2\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"status\":\"affected\"},{\"version\":\"6.4.0.1\",\"status\":\"affected\"},{\"version\":\"6.4.0.3\",\"status\":\"affected\"},{\"version\":\"6.4.0.2\",\"status\":\"affected\"},{\"version\":\"6.4.0.4\",\"status\":\"affected\"},{\"version\":\"6.4.0.5\",\"status\":\"affected\"},{\"version\":\"6.4.0.6\",\"status\":\"affected\"},{\"version\":\"6.4.0.7\",\"status\":\"affected\"},{\"version\":\"6.4.0.8\",\"status\":\"affected\"},{\"version\":\"6.4.0.9\",\"status\":\"affected\"},{\"version\":\"6.4.0.10\",\"status\":\"affected\"},{\"version\":\"6.4.0.11\",\"status\":\"affected\"},{\"version\":\"6.4.0.12\",\"status\":\"affected\"},{\"version\":\"6.4.0.13\",\"status\":\"affected\"},{\"version\":\"6.4.0.14\",\"status\":\"affected\"},{\"version\":\"6.4.0.15\",\"status\":\"affected\"},{\"version\":\"6.4.0.16\",\"status\":\"affected\"},{\"version\":\"6.4.0.17\",\"status\":\"affected\"},{\"version\":\"6.4.0.18\",\"status\":\"affected\"},{\"version\":\"6.7.0\",\"status\":\"affected\"},{\"version\":\"6.7.0.1\",\"status\":\"affected\"},{\"version\":\"6.7.0.2\",\"status\":\"affected\"},{\"version\":\"6.7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"status\":\"affected\"},{\"version\":\"7.0.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1.1\",\"status\":\"affected\"},{\"version\":\"7.0.2\",\"status\":\"affected\"},{\"version\":\"7.0.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.4\",\"status\":\"affected\"},{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"7.0.6\",\"status\":\"affected\"},{\"version\":\"7.0.6.1\",\"status\":\"affected\"},{\"version\":\"7.0.6.2\",\"status\":\"affected\"},{\"version\":\"7.1.0\",\"status\":\"affected\"},{\"version\":\"7.1.0.1\",\"status\":\"affected\"},{\"version\":\"7.1.0.2\",\"status\":\"affected\"},{\"version\":\"7.1.0.3\",\"status\":\"affected\"},{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.2.0.1\",\"status\":\"affected\"},{\"version\":\"7.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.2.4\",\"status\":\"affected\"},{\"version\":\"7.2.4.1\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"7.2.5.1\",\"status\":\"affected\"},{\"version\":\"7.2.6\",\"status\":\"affected\"},{\"version\":\"7.2.7\",\"status\":\"affected\"},{\"version\":\"7.2.5.2\",\"status\":\"affected\"},{\"version\":\"7.2.8\",\"status\":\"affected\"},{\"version\":\"7.2.8.1\",\"status\":\"affected\"},{\"version\":\"7.3.0\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.2\",\"status\":\"affected\"},{\"version\":\"7.4.0\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"status\":\"affected\"},{\"version\":\"7.4.1.1\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of the RAVPN service.\r\n\r This vulnerability is due to resource exhaustion. An attacker could exploit this vulnerability by sending a large number of VPN authentication requests to an affected device. A successful exploit could allow the attacker to exhaust resources, resulting in a DoS of the RAVPN service on the affected device. Depending on the impact of the attack, a reload of the device may be required to restore the RAVPN service. Services that are not related to VPN are not affected.\r\n\r Cisco Talos discussed these attacks in the blog post Large-scale brute-force activity targeting VPNs, SSH services with commonly used login credentials.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "The Cisco Product Security Incident Response Team (PSIRT) is aware of malicious use of the vulnerability that is described in this advisory.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Missing Release of Resource after Effective Lifetime\",\"type\":\"cwe\",\"cweId\":\"CWE-772\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L\",\"baseScore\":5.8,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-20481:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481", "sourcePath": "retained:/originalText", "text": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release of resource after effective lifetime vulnerability that could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) of the RAVPN service.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-20481:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481", "modifiedAt": "2024-10-24T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:41.272Z", "fetchedAt": "2026-10-24T05:07:20.216Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-24T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Softwareにサービス停止に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "処理の停止や過大な負荷により、サービスを利用できなくなる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:07:20.216Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ee5747b761a2284648950d5ee52bbbc34e1c0d7e3838cffb04ff0cd4c4236284", "sourceModifiedAt": "2025-10-21T22:55:41.272Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Firepower Threat Defense (FTD) ソフトウェアのリモートアクセス VPN (RAVPN) サービスにおける脆弱性により、認証されていないリモート攻撃者が大量の VPN 認証要求を送信することでリソースが枯渇し、RAVPN サービスが停止 (DoS) する可能性があります。影響を受けたデバイスでは、RAVPN サービスを復旧させるためにデバイスのリロードが必要になることがあります。VPN 以外のサービスは影響を受けません。", "risk": "RAVPN サービスが停止し、リモートアクセス VPN が利用できなくなる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者は認証されていないリモートの外部から実行できます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃者は大量の VPN 認証要求を送信する必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json" ], "evidenceIds": [ "E1" ] }, { "text": "大量の認証要求によりデバイスのリソースが枯渇します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json" ], "evidenceIds": [ "E1" ] }, { "text": "リソース枯渇により RAVPN サービスが停止 (DoS) します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json" ], "evidenceIds": [ "E1" ] }, { "text": "影響を受けるのは RAVPN サービスのみで、VPN 以外のサービスは影響を受けません。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json" ], "evidenceIds": [ "E1" ] }, { "text": "サービスが停止した場合、RAVPN サービスを復旧させるためにデバイスのリロードが必要になることがあります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Cisco / Cisco Adaptive Security Appliance (ASA) Software。影響ありとして記載：9.8.1。影響ありとして記載：9.8.1.5。影響ありとして記載：9.8.1.7。影響ありとして記載：9.8.2。影響ありとして記載：9.8.2.8。影響ありとして記載：9.8.2.14。影響ありとして記載：9.8.2.15。影響ありとして記載：9.8.2.17。影響ありとして記載：9.8.2.20。影響ありとして記載：9.8.2.24。影響ありとして記載：9.8.2.26。影響ありとして記載：9.8.2.28。影響ありとして記載：9.8.2.33。影響ありとして記載：9.8.2.35。影響ありとして記載：9.8.2.38。影響ありとして記載：9.8.3.8。影響ありとして記載：9.8.3.11。影響ありとして記載：9.8.3.14。影響ありとして記載：9.8.3.16。影響ありとして記載：9.8.3.18。影響ありとして記載：9.8.3.21。影響ありとして記載：9.8.3。影響ありとして記載：9.8.3.26。影響ありとして記載：9.8.3.29。影響ありとして記載：9.8.4。影響ありとして記載：9.8.4.3。影響ありとして記載：9.8.4.7。影響ありとして記載：9.8.4.8。影響ありとして記載：9.8.4.10。影響ありとして記載：9.8.4.12。影響ありとして記載：9.8.4.15。影響ありとして記載：9.8.4.17。影響ありとして記載：9.8.2.45。影響ありとして記載：9.8.4.25。影響ありとして記載：9.8.4.20。影響ありとして記載：9.8.4.22。影響ありとして記載：9.8.4.26。影響ありとして記載：9.8.4.29。影響ありとして記載：9.8.4.32。影響ありとして記載：9.8.4.33。影響ありとして記載：9.8.4.34。影響ありとして記載：9.8.4.35。影響ありとして記載：9.8.4.39。影響ありとして記載：9.8.4.40。影響ありとして記載：9.8.4.41。影響ありとして記載：9.8.4.43。影響ありとして記載：9.8.4.44。影響ありとして記載：9.8.4.45。影響ありとして記載：9.8.4.46。影響ありとして記載：9.8.4.48。影響ありとして記載：9.12.1。影響ありとして記載：9.12.1.2。影響ありとして記載：9.12.1.3。影響ありとして記載：9.12.2。影響ありとして記載：9.12.2.4。影響ありとして記載：9.12.2.5。影響ありとして記載：9.12.2.9。影響ありとして記載：9.12.3。影響ありとして記載：9.12.3.2。影響ありとして記載：9.12.3.7。影響ありとして記載：9.12.4。影響ありとして記載：9.12.3.12。影響ありとして記載：9.12.3.9。影響ありとして記載：9.12.2.1。影響ありとして記載：9.12.4.2。影響ありとして記載：9.12.4.4。影響ありとして記載：9.12.4.7。影響ありとして記載：9.12.4.10。影響ありとして記載：9.12.4.13。影響ありとして記載：9.12.4.8。影響ありとして記載：9.12.4.18。影響ありとして記載：9.12.4.24。影響ありとして記載：9.12.4.26。影響ありとして記載：9.12.4.29。影響ありとして記載：9.12.4.30。影響ありとして記載：9.12.4.35。影響ありとして記載：9.12.4.37。影響ありとして記載：9.12.4.38。影響ありとして記載：9.12.4.39。影響ありとして記載：9.12.4.40。影響ありとして記載：9.12.4.41。影響ありとして記載：9.12.4.47。影響ありとして記載：9.12.4.48。影響ありとして記載：9.12.4.50。影響ありとして記載：9.12.4.52。影響ありとして記載：9.12.4.54。影響ありとして記載：9.12.4.55。影響ありとして記載：9.12.4.56。影響ありとして記載：9.12.4.58。影響ありとして記載：9.12.4.62。影響ありとして記載：9.12.4.65。影響ありとして記載：9.12.4.67。影響ありとして記載：9.14.1。影響ありとして記載：9.14.1.10。影響ありとして記載：9.14.1.6。影響ありとして記載：9.14.1.15。影響ありとして記載：9.14.1.19。影響ありとして記載：9.14.1.30。影響ありとして記載：9.14.2。影響ありとして記載：9.14.2.4。影響ありとして記載：9.14.2.8。影響ありとして記載：9.14.2.13。影響ありとして記載：9.14.2.15。影響ありとして記載：9.14.3。影響ありとして記載：9.14.3.1。影響ありとして記載：9.14.3.9。影響ありとして記載：9.14.3.11。影響ありとして記載：9.14.3.13。影響ありとして記載：9.14.3.18。影響ありとして記載：9.14.3.15。影響ありとして記載：9.14.4。影響ありとして記載：9.14.4.6。影響ありとして記載：9.14.4.7。影響ありとして記載：9.14.4.12。影響ありとして記載：9.14.4.13。影響ありとして記載：9.14.4.14。影響ありとして記載：9.14.4.15。影響ありとして記載：9.14.4.17。影響ありとして記載：9.14.4.22。影響ありとして記載：9.14.4.23。影響ありとして記載：9.14.4.24。影響ありとして記載：9.15.1。影響ありとして記載：9.15.1.7。影響ありとして記載：9.15.1.10。影響ありとして記載：9.15.1.15。影響ありとして記載：9.15.1.16。影響ありとして記載：9.15.1.17。影響ありとして記載：9.15.1.1。影響ありとして記載：9.15.1.21。影響ありとして記載：9.16.1。影響ありとして記載：9.16.1.28。影響ありとして記載：9.16.2。影響ありとして記載：9.16.2.3。影響ありとして記載：9.16.2.7。影響ありとして記載：9.16.2.11。影響ありとして記載：9.16.2.13。影響ありとして記載：9.16.2.14。影響ありとして記載：9.16.3。影響ありとして記載：9.16.3.3。影響ありとして記載：9.16.3.14。影響ありとして記載：9.16.3.15。影響ありとして記載：9.16.3.19。影響ありとして記載：9.16.3.23。影響ありとして記載：9.16.4。影響ありとして記載：9.16.4.9。影響ありとして記載：9.16.4.14。影響ありとして記載：9.16.4.18。影響ありとして記載：9.16.4.19。影響ありとして記載：9.16.4.27。影響ありとして記載：9.16.4.38。影響ありとして記載：9.16.4.39。影響ありとして記載：9.16.4.42。影響ありとして記載：9.16.4.48。影響ありとして記載：9.16.4.55。影響ありとして記載：9.16.4.57。影響ありとして記載：9.16.4.61。影響ありとして記載：9.17.1。影響ありとして記載：9.17.1.7。影響ありとして記載：9.17.1.9。影響ありとして記載：9.17.1.10。影響ありとして記載：9.17.1.11。影響ありとして記載：9.17.1.13。影響ありとして記載：9.17.1.15。影響ありとして記載：9.17.1.20。影響ありとして記載：9.17.1.30。影響ありとして記載：9.17.1.33。影響ありとして記載：9.17.1.39。影響ありとして記載：9.18.1。影響ありとして記載：9.18.1.3。影響ありとして記載：9.18.2。影響ありとして記載：9.18.2.5。影響ありとして記載：9.18.2.7。影響ありとして記載：9.18.2.8。影響ありとして記載：9.18.3。影響ありとして記載：9.18.3.39。影響ありとして記載：9.18.3.46。影響ありとして記載：9.18.3.53。影響ありとして記載：9.18.3.55。影響ありとして記載：9.18.3.56。影響ありとして記載：9.18.4。影響ありとして記載：9.18.4.5。影響ありとして記載：9.18.4.8。影響ありとして記載：9.18.4.22。影響ありとして記載：9.18.4.24。影響ありとして記載：9.19.1。影響ありとして記載：9.19.1.5。影響ありとして記載：9.19.1.9。影響ありとして記載：9.19.1.12。影響ありとして記載：9.19.1.18。影響ありとして記載：9.19.1.22。影響ありとして記載：9.19.1.24。影響ありとして記載：9.19.1.27。影響ありとして記載：9.19.1.28。影響ありとして記載：9.19.1.31。影響ありとして記載：9.20.1。影響ありとして記載：9.20.1.5。影響ありとして記載：9.20.2。影響ありとして記載：9.20.2.10。影響ありとして記載：9.20.2.21。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Cisco / Cisco Firepower Threat Defense Software。影響ありとして記載：6.2.3。影響ありとして記載：6.2.3.1。影響ありとして記載：6.2.3.2。影響ありとして記載：6.2.3.3。影響ありとして記載：6.2.3.4。影響ありとして記載：6.2.3.5。影響ありとして記載：6.2.3.6。影響ありとして記載：6.2.3.7。影響ありとして記載：6.2.3.8。影響ありとして記載：6.2.3.10。影響ありとして記載：6.2.3.11。影響ありとして記載：6.2.3.9。影響ありとして記載：6.2.3.12。影響ありとして記載：6.2.3.13。影響ありとして記載：6.2.3.14。影響ありとして記載：6.2.3.15。影響ありとして記載：6.2.3.16。影響ありとして記載：6.2.3.17。影響ありとして記載：6.2.3.18。影響ありとして記載：6.6.0。影響ありとして記載：6.6.0.1。影響ありとして記載：6.6.1。影響ありとして記載：6.6.3。影響ありとして記載：6.6.4。影響ありとして記載：6.6.5。影響ありとして記載：6.6.5.1。影響ありとして記載：6.6.5.2。影響ありとして記載：6.6.7。影響ありとして記載：6.6.7.1。影響ありとして記載：6.6.7.2。影響ありとして記載：6.4.0。影響ありとして記載：6.4.0.1。影響ありとして記載：6.4.0.3。影響ありとして記載：6.4.0.2。影響ありとして記載：6.4.0.4。影響ありとして記載：6.4.0.5。影響ありとして記載：6.4.0.6。影響ありとして記載：6.4.0.7。影響ありとして記載：6.4.0.8。影響ありとして記載：6.4.0.9。影響ありとして記載：6.4.0.10。影響ありとして記載：6.4.0.11。影響ありとして記載：6.4.0.12。影響ありとして記載：6.4.0.13。影響ありとして記載：6.4.0.14。影響ありとして記載：6.4.0.15。影響ありとして記載：6.4.0.16。影響ありとして記載：6.4.0.17。影響ありとして記載：6.4.0.18。影響ありとして記載：6.7.0。影響ありとして記載：6.7.0.1。影響ありとして記載：6.7.0.2。影響ありとして記載：6.7.0.3。影響ありとして記載：7.0.0。影響ありとして記載：7.0.0.1。影響ありとして記載：7.0.1。影響ありとして記載：7.0.1.1。影響ありとして記載：7.0.2。影響ありとして記載：7.0.2.1。影響ありとして記載：7.0.3。影響ありとして記載：7.0.4。影響ありとして記載：7.0.5。影響ありとして記載：7.0.6。影響ありとして記載：7.0.6.1。影響ありとして記載：7.0.6.2。影響ありとして記載：7.1.0。影響ありとして記載：7.1.0.1。影響ありとして記載：7.1.0.2。影響ありとして記載：7.1.0.3。影響ありとして記載：7.2.0。影響ありとして記載：7.2.0.1。影響ありとして記載：7.2.1。影響ありとして記載：7.2.2。影響ありとして記載：7.2.3。影響ありとして記載：7.2.4。影響ありとして記載：7.2.4.1。影響ありとして記載：7.2.5。影響ありとして記載：7.2.5.1。影響ありとして記載：7.2.6。影響ありとして記載：7.2.7。影響ありとして記載：7.2.5.2。影響ありとして記載：7.2.8。影響ありとして記載：7.2.8.1。影響ありとして記載：7.3.0。影響ありとして記載：7.3.1。影響ありとして記載：7.3.1.1。影響ありとして記載：7.3.1.2。影響ありとして記載：7.4.0。影響ありとして記載：7.4.1。影響ありとして記載：7.4.1.1。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-20481", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-bf-dos-vDZhLqrW", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481", "https://nvd.nist.gov/vuln/detail/CVE-2024-20481" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2024-20481」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-20481", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-bf-dos-vDZhLqrW", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481", "https://nvd.nist.gov/vuln/detail/CVE-2024-20481" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-20481", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-bf-dos-vDZhLqrW", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481", "https://nvd.nist.gov/vuln/detail/CVE-2024-20481" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-20481", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-bf-dos-vDZhLqrW", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481", "https://nvd.nist.gov/vuln/detail/CVE-2024-20481" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-20481", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-bf-dos-vDZhLqrW", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481", "https://nvd.nist.gov/vuln/detail/CVE-2024-20481" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-20481", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-bf-dos-vDZhLqrW", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20481", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of the RAVPN service.\r\n\r This vulnerability is due to resource exhaustion. An attacker could exploit this vulnerability by sending a large number of VPN authentication requests to an affected device. A successful exploit could allow the attacker to exhaust resources, resulting in a DoS of the RAVPN service on the affected device. Depending on the impact of the attack, a reload of the device may be required to restore the RAVPN service. Services that are not related to VPN are not affected.\r\n\r Cisco Talos discussed these attacks in the blog post Large-scale brute-force activity targeting VPNs, SSH services with commonly used login credentials.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Adaptive Security Appliance (ASA) Software\",\"versions\":[{\"version\":\"9.8.1\",\"status\":\"affected\"},{\"version\":\"9.8.1.5\",\"status\":\"affected\"},{\"version\":\"9.8.1.7\",\"status\":\"affected\"},{\"version\":\"9.8.2\",\"status\":\"affected\"},{\"version\":\"9.8.2.8\",\"status\":\"affected\"},{\"version\":\"9.8.2.14\",\"status\":\"affected\"},{\"version\":\"9.8.2.15\",\"status\":\"affected\"},{\"version\":\"9.8.2.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.20\",\"status\":\"affected\"},{\"version\":\"9.8.2.24\",\"status\":\"affected\"},{\"version\":\"9.8.2.26\",\"status\":\"affected\"},{\"version\":\"9.8.2.28\",\"status\":\"affected\"},{\"version\":\"9.8.2.33\",\"status\":\"affected\"},{\"version\":\"9.8.2.35\",\"status\":\"affected\"},{\"version\":\"9.8.2.38\",\"status\":\"affected\"},{\"version\":\"9.8.3.8\",\"status\":\"affected\"},{\"version\":\"9.8.3.11\",\"status\":\"affected\"},{\"version\":\"9.8.3.14\",\"status\":\"affected\"},{\"version\":\"9.8.3.16\",\"status\":\"affected\"},{\"version\":\"9.8.3.18\",\"status\":\"affected\"},{\"version\":\"9.8.3.21\",\"status\":\"affected\"},{\"version\":\"9.8.3\",\"status\":\"affected\"},{\"version\":\"9.8.3.26\",\"status\":\"affected\"},{\"version\":\"9.8.3.29\",\"status\":\"affected\"},{\"version\":\"9.8.4\",\"status\":\"affected\"},{\"version\":\"9.8.4.3\",\"status\":\"affected\"},{\"version\":\"9.8.4.7\",\"status\":\"affected\"},{\"version\":\"9.8.4.8\",\"status\":\"affected\"},{\"version\":\"9.8.4.10\",\"status\":\"affected\"},{\"version\":\"9.8.4.12\",\"status\":\"affected\"},{\"version\":\"9.8.4.15\",\"status\":\"affected\"},{\"version\":\"9.8.4.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.25\",\"status\":\"affected\"},{\"version\":\"9.8.4.20\",\"status\":\"affected\"},{\"version\":\"9.8.4.22\",\"status\":\"affected\"},{\"version\":\"9.8.4.26\",\"status\":\"affected\"},{\"version\":\"9.8.4.29\",\"status\":\"affected\"},{\"version\":\"9.8.4.32\",\"status\":\"affected\"},{\"version\":\"9.8.4.33\",\"status\":\"affected\"},{\"version\":\"9.8.4.34\",\"status\":\"affected\"},{\"version\":\"9.8.4.35\",\"status\":\"affected\"},{\"version\":\"9.8.4.39\",\"status\":\"affected\"},{\"version\":\"9.8.4.40\",\"status\":\"affected\"},{\"version\":\"9.8.4.41\",\"status\":\"affected\"},{\"version\":\"9.8.4.43\",\"status\":\"affected\"},{\"version\":\"9.8.4.44\",\"status\":\"affected\"},{\"version\":\"9.8.4.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.46\",\"status\":\"affected\"},{\"version\":\"9.8.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.1\",\"status\":\"affected\"},{\"version\":\"9.12.1.2\",\"status\":\"affected\"},{\"version\":\"9.12.1.3\",\"status\":\"affected\"},{\"version\":\"9.12.2\",\"status\":\"affected\"},{\"version\":\"9.12.2.4\",\"status\":\"affected\"},{\"version\":\"9.12.2.5\",\"status\":\"affected\"},{\"version\":\"9.12.2.9\",\"status\":\"affected\"},{\"version\":\"9.12.3\",\"status\":\"affected\"},{\"version\":\"9.12.3.2\",\"status\":\"affected\"},{\"version\":\"9.12.3.7\",\"status\":\"affected\"},{\"version\":\"9.12.4\",\"status\":\"affected\"},{\"version\":\"9.12.3.12\",\"status\":\"affected\"},{\"version\":\"9.12.3.9\",\"status\":\"affected\"},{\"version\":\"9.12.2.1\",\"status\":\"affected\"},{\"version\":\"9.12.4.2\",\"status\":\"affected\"},{\"version\":\"9.12.4.4\",\"status\":\"affected\"},{\"version\":\"9.12.4.7\",\"status\":\"affected\"},{\"version\":\"9.12.4.10\",\"status\":\"affected\"},{\"version\":\"9.12.4.13\",\"status\":\"affected\"},{\"version\":\"9.12.4.8\",\"status\":\"affected\"},{\"version\":\"9.12.4.18\",\"status\":\"affected\"},{\"version\":\"9.12.4.24\",\"status\":\"affected\"},{\"version\":\"9.12.4.26\",\"status\":\"affected\"},{\"version\":\"9.12.4.29\",\"status\":\"affected\"},{\"version\":\"9.12.4.30\",\"status\":\"affected\"},{\"version\":\"9.12.4.35\",\"status\":\"affected\"},{\"version\":\"9.12.4.37\",\"status\":\"affected\"},{\"version\":\"9.12.4.38\",\"status\":\"affected\"},{\"version\":\"9.12.4.39\",\"status\":\"affected\"},{\"version\":\"9.12.4.40\",\"status\":\"affected\"},{\"version\":\"9.12.4.41\",\"status\":\"affected\"},{\"version\":\"9.12.4.47\",\"status\":\"affected\"},{\"version\":\"9.12.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.4.50\",\"status\":\"affected\"},{\"version\":\"9.12.4.52\",\"status\":\"affected\"},{\"version\":\"9.12.4.54\",\"status\":\"affected\"},{\"version\":\"9.12.4.55\",\"status\":\"affected\"},{\"version\":\"9.12.4.56\",\"status\":\"affected\"},{\"version\":\"9.12.4.58\",\"status\":\"affected\"},{\"version\":\"9.12.4.62\",\"status\":\"affected\"},{\"version\":\"9.12.4.65\",\"status\":\"affected\"},{\"version\":\"9.12.4.67\",\"status\":\"affected\"},{\"version\":\"9.14.1\",\"status\":\"affected\"},{\"version\":\"9.14.1.10\",\"status\":\"affected\"},{\"version\":\"9.14.1.6\",\"status\":\"affected\"},{\"version\":\"9.14.1.15\",\"status\":\"affected\"},{\"version\":\"9.14.1.19\",\"status\":\"affected\"},{\"version\":\"9.14.1.30\",\"status\":\"affected\"},{\"version\":\"9.14.2\",\"status\":\"affected\"},{\"version\":\"9.14.2.4\",\"status\":\"affected\"},{\"version\":\"9.14.2.8\",\"status\":\"affected\"},{\"version\":\"9.14.2.13\",\"status\":\"affected\"},{\"version\":\"9.14.2.15\",\"status\":\"affected\"},{\"version\":\"9.14.3\",\"status\":\"affected\"},{\"version\":\"9.14.3.1\",\"status\":\"affected\"},{\"version\":\"9.14.3.9\",\"status\":\"affected\"},{\"version\":\"9.14.3.11\",\"status\":\"affected\"},{\"version\":\"9.14.3.13\",\"status\":\"affected\"},{\"version\":\"9.14.3.18\",\"status\":\"affected\"},{\"version\":\"9.14.3.15\",\"status\":\"affected\"},{\"version\":\"9.14.4\",\"status\":\"affected\"},{\"version\":\"9.14.4.6\",\"status\":\"affected\"},{\"version\":\"9.14.4.7\",\"status\":\"affected\"},{\"version\":\"9.14.4.12\",\"status\":\"affected\"},{\"version\":\"9.14.4.13\",\"status\":\"affected\"},{\"version\":\"9.14.4.14\",\"status\":\"affected\"},{\"version\":\"9.14.4.15\",\"status\":\"affected\"},{\"version\":\"9.14.4.17\",\"status\":\"affected\"},{\"version\":\"9.14.4.22\",\"status\":\"affected\"},{\"version\":\"9.14.4.23\",\"status\":\"affected\"},{\"version\":\"9.14.4.24\",\"status\":\"affected\"},{\"version\":\"9.15.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.7\",\"status\":\"affected\"},{\"version\":\"9.15.1.10\",\"status\":\"affected\"},{\"version\":\"9.15.1.15\",\"status\":\"affected\"},{\"version\":\"9.15.1.16\",\"status\":\"affected\"},{\"version\":\"9.15.1.17\",\"status\":\"affected\"},{\"version\":\"9.15.1.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.21\",\"status\":\"affected\"},{\"version\":\"9.16.1\",\"status\":\"affected\"},{\"version\":\"9.16.1.28\",\"status\":\"affected\"},{\"version\":\"9.16.2\",\"status\":\"affected\"},{\"version\":\"9.16.2.3\",\"status\":\"affected\"},{\"version\":\"9.16.2.7\",\"status\":\"affected\"},{\"version\":\"9.16.2.11\",\"status\":\"affected\"},{\"version\":\"9.16.2.13\",\"status\":\"affected\"},{\"version\":\"9.16.2.14\",\"status\":\"affected\"},{\"version\":\"9.16.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.14\",\"status\":\"affected\"},{\"version\":\"9.16.3.15\",\"status\":\"affected\"},{\"version\":\"9.16.3.19\",\"status\":\"affected\"},{\"version\":\"9.16.3.23\",\"status\":\"affected\"},{\"version\":\"9.16.4\",\"status\":\"affected\"},{\"version\":\"9.16.4.9\",\"status\":\"affected\"},{\"version\":\"9.16.4.14\",\"status\":\"affected\"},{\"version\":\"9.16.4.18\",\"status\":\"affected\"},{\"version\":\"9.16.4.19\",\"status\":\"affected\"},{\"version\":\"9.16.4.27\",\"status\":\"affected\"},{\"version\":\"9.16.4.38\",\"status\":\"affected\"},{\"version\":\"9.16.4.39\",\"status\":\"affected\"},{\"version\":\"9.16.4.42\",\"status\":\"affected\"},{\"version\":\"9.16.4.48\",\"status\":\"affected\"},{\"version\":\"9.16.4.55\",\"status\":\"affected\"},{\"version\":\"9.16.4.57\",\"status\":\"affected\"},{\"version\":\"9.16.4.61\",\"status\":\"affected\"},{\"version\":\"9.17.1\",\"status\":\"affected\"},{\"version\":\"9.17.1.7\",\"status\":\"affected\"},{\"version\":\"9.17.1.9\",\"status\":\"affected\"},{\"version\":\"9.17.1.10\",\"status\":\"affected\"},{\"version\":\"9.17.1.11\",\"status\":\"affected\"},{\"version\":\"9.17.1.13\",\"status\":\"affected\"},{\"version\":\"9.17.1.15\",\"status\":\"affected\"},{\"version\":\"9.17.1.20\",\"status\":\"affected\"},{\"version\":\"9.17.1.30\",\"status\":\"affected\"},{\"version\":\"9.17.1.33\",\"status\":\"affected\"},{\"version\":\"9.17.1.39\",\"status\":\"affected\"},{\"version\":\"9.18.1\",\"status\":\"affected\"},{\"version\":\"9.18.1.3\",\"status\":\"affected\"},{\"version\":\"9.18.2\",\"status\":\"affected\"},{\"version\":\"9.18.2.5\",\"status\":\"affected\"},{\"version\":\"9.18.2.7\",\"status\":\"affected\"},{\"version\":\"9.18.2.8\",\"status\":\"affected\"},{\"version\":\"9.18.3\",\"status\":\"affected\"},{\"version\":\"9.18.3.39\",\"status\":\"affected\"},{\"version\":\"9.18.3.46\",\"status\":\"affected\"},{\"version\":\"9.18.3.53\",\"status\":\"affected\"},{\"version\":\"9.18.3.55\",\"status\":\"affected\"},{\"version\":\"9.18.3.56\",\"status\":\"affected\"},{\"version\":\"9.18.4\",\"status\":\"affected\"},{\"version\":\"9.18.4.5\",\"status\":\"affected\"},{\"version\":\"9.18.4.8\",\"status\":\"affected\"},{\"version\":\"9.18.4.22\",\"status\":\"affected\"},{\"version\":\"9.18.4.24\",\"status\":\"affected\"},{\"version\":\"9.19.1\",\"status\":\"affected\"},{\"version\":\"9.19.1.5\",\"status\":\"affected\"},{\"version\":\"9.19.1.9\",\"status\":\"affected\"},{\"version\":\"9.19.1.12\",\"status\":\"affected\"},{\"version\":\"9.19.1.18\",\"status\":\"affected\"},{\"version\":\"9.19.1.22\",\"status\":\"affected\"},{\"version\":\"9.19.1.24\",\"status\":\"affected\"},{\"version\":\"9.19.1.27\",\"status\":\"affected\"},{\"version\":\"9.19.1.28\",\"status\":\"affected\"},{\"version\":\"9.19.1.31\",\"status\":\"affected\"},{\"version\":\"9.20.1\",\"status\":\"affected\"},{\"version\":\"9.20.1.5\",\"status\":\"affected\"},{\"version\":\"9.20.2\",\"status\":\"affected\"},{\"version\":\"9.20.2.10\",\"status\":\"affected\"},{\"version\":\"9.20.2.21\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20481.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Firepower Threat Defense Software\",\"versions\":[{\"version\":\"6.2.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.1\",\"status\":\"affected\"},{\"version\":\"6.2.3.2\",\"status\":\"affected\"},{\"version\":\"6.2.3.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.4\",\"status\":\"affected\"},{\"version\":\"6.2.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.3.6\",\"status\":\"affected\"},{\"version\":\"6.2.3.7\",\"status\":\"affected\"},{\"version\":\"6.2.3.8\",\"status\":\"affected\"},{\"version\":\"6.2.3.10\",\"status\":\"affected\"},{\"version\":\"6.2.3.11\",\"status\":\"affected\"},{\"version\":\"6.2.3.9\",\"status\":\"affected\"},{\"version\":\"6.2.3.12\",\"status\":\"affected\"},{\"version\":\"6.2.3.13\",\"status\":\"affected\"},{\"version\":\"6.2.3.14\",\"status\":\"affected\"},{\"version\":\"6.2.3.15\",\"status\":\"affected\"},{\"version\":\"6.2.3.16\",\"status\":\"affected\"},{\"version\":\"6.2.3.17\",\"status\":\"affected\"},{\"version\":\"6.2.3.18\",\"status\":\"affected\"},{\"version\":\"6.6.0\",\"status\":\"affected\"},{\"version\":\"6.6.0.1\",\"status\":\"affected\"},{\"version\":\"6.6.1\",\"status\":\"affected\"},{\"version\":\"6.6.3\",\"status\":\"affected\"},{\"version\":\"6.6.4\",\"status\":\"affected\"},{\"version\":\"6.6.5\",\"status\":\"affected\"},{\"version\":\"6.6.5.1\",\"status\":\"affected\"},{\"version\":\"6.6.5.2\",\"status\":\"affected\"},{\"version\":\"6.6.7\",\"status\":\"affected\"},{\"version\":\"6.6.7.1\",\"status\":\"affected\"},{\"version\":\"6.6.7.2\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"status\":\"affected\"},{\"version\":\"6.4.0.1\",\"status\":\"affected\"},{\"version\":\"6.4.0.3\",\"status\":\"affected\"},{\"version\":\"6.4.0.2\",\"status\":\"affected\"},{\"version\":\"6.4.0.4\",\"status\":\"affected\"},{\"version\":\"6.4.0.5\",\"status\":\"affected\"},{\"version\":\"6.4.0.6\",\"status\":\"affected\"},{\"version\":\"6.4.0.7\",\"status\":\"affected\"},{\"version\":\"6.4.0.8\",\"status\":\"affected\"},{\"version\":\"6.4.0.9\",\"status\":\"affected\"},{\"version\":\"6.4.0.10\",\"status\":\"affected\"},{\"version\":\"6.4.0.11\",\"status\":\"affected\"},{\"version\":\"6.4.0.12\",\"status\":\"affected\"},{\"version\":\"6.4.0.13\",\"status\":\"affected\"},{\"version\":\"6.4.0.14\",\"status\":\"affected\"},{\"version\":\"6.4.0.15\",\"status\":\"affected\"},{\"version\":\"6.4.0.16\",\"status\":\"affected\"},{\"version\":\"6.4.0.17\",\"status\":\"affected\"},{\"version\":\"6.4.0.18\",\"status\":\"affected\"},{\"version\":\"6.7.0\",\"status\":\"affected\"},{\"version\":\"6.7.0.1\",\"status\":\"affected\"},{\"version\":\"6.7.0.2\",\"status\":\"affected\"},{\"version\":\"6.7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"status\":\"affected\"},{\"version\":\"7.0.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1.1\",\"status\":\"affected\"},{\"version\":\"7.0.2\",\"status\":\"affected\"},{\"version\":\"7.0.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.4\",\"status\":\"affected\"},{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"7.0.6\",\"status\":\"affected\"},{\"version\":\"7.0.6.1\",\"status\":\"affected\"},{\"version\":\"7.0.6.2\",\"status\":\"affected\"},{\"version\":\"7.1.0\",\"status\":\"affected\"},{\"version\":\"7.1.0.1\",\"status\":\"affected\"},{\"version\":\"7.1.0.2\",\"status\":\"affected\"},{\"version\":\"7.1.0.3\",\"status\":\"affected\"},{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.2.0.1\",\"status\":\"affected\"},{\"version\":\"7.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.2.4\",\"status\":\"affected\"},{\"version\":\"7.2.4.1\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"7.2.5.1\",\"status\":\"affected\"},{\"version\":\"7.2.6\",\"status\":\"affected\"},{\"version\":\"7.2.7\",\"status\":\"affected\"},{\"version\":\"7.2.5.2\",\"status\":\"affected\"},{\"version\":\"7.2.8\",\"status\":\"affected\"},{\"version\":\"7.2.8.1\",\"status\":\"affected\"},{\"version\":\"7.3.0\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.2\",\"status\":\"affected\"},{\"version\":\"7.4.0\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"status\":\"affected\"},{\"version\":\"7.4.1.1\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20481", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-20481\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-20481（Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者は認証されていないリモートの外部から実行できます。\n・攻撃者は大量の VPN 認証要求を送信する必要があります。\n・大量の認証要求によりデバイスのリソースが枯渇します。\n・リソース枯渇により RAVPN サービスが停止 (DoS) します。\n・影響を受けるのは RAVPN サービスのみで、VPN 以外のサービスは影響を受けません。\n・サービスが停止した場合、RAVPN サービスを復旧させるためにデバイスのリロードが必要になることがあります。\n・公式の対象表：Cisco / Cisco Adaptive Security Appliance (ASA) Software。影響ありとして記載：9.8.1。影響ありとして記載：9.8.1.5。影響ありとして記載：9.8.1.7。影響ありとして記載：9.8.2。影響ありとして記載：9.8.2.8。影響ありとして記載：9.8.2.14。影響ありとして記載：9.8.2.15。影響ありとして記載：9.8.2.17。影響ありとして記載：9.8.2.20。影響ありとして記載：9.8.2.24。影響ありとして記載：9.8.2.26。影響ありとして記載：9.8.2.28。影響ありとして記載：9.8.2.33。影響ありとして記載：9.8.2.35。影響ありとして記載：9.8.2.38。影響ありとして記載：9.8.3.8。影響ありとして記載：9.8.3.11。影響ありとして記載：9.8.3.14。影響ありとして記載：9.8.3.16。影響ありとして記載：9.8.3.18。影響ありとして記載：9.8.3.21。影響ありとして記載：9.8.3。影響ありとして記載：9.8.3.26。影響ありとして記載：9.8.3.29。影響ありとして記載：9.8.4。影響ありとして記載：9.8.4.3。影響ありとして記載：9.8.4.7。影響ありとして記載：9.8.4.8。影響ありとして記載：9.8.4.10。影響ありとして記載：9.8.4.12。影響ありとして記載：9.8.4.15。影響ありとして記載：9.8.4.17。影響ありとして記載：9.8.2.45。影響ありとして記載：9.8.4.25。影響ありとして記載：9.8.4.20。影響ありとして記載：9.8.4.22。影響ありとして記載：9.8.4.26。影響ありとして記載：9.8.4.29。影響ありとして記載：9.8.4.32。影響ありとして記載：9.8.4.33。影響ありとして記載：9.8.4.34。影響ありとして記載：9.8.4.35。影響ありとして記載：9.8.4.39。影響ありとして記載：9.8.4.40。影響ありとして記載：9.8.4.41。影響ありとして記載：9.8.4.43。影響ありとして記載：9.8.4.44。影響ありとして記載：9.8.4.45。影響ありとして記載：9.8.4.46。影響ありとして記載：9.8.4.48。影響ありとして記載：9.12.1。影響ありとして記載：9.12.1.2。影響ありとして記載：9.12.1.3。影響ありとして記載：9.12.2。影響ありとして記載：9.12.2.4。影響ありとして記載：9.12.2.5。影響ありとして記載：9.12.2.9。影響ありとして記載：9.12.3。影響ありとして記載：9.12.3.2。影響ありとして記載：9.12.3.7。影響ありとして記載：9.12.4。影響ありとして記載：9.12.3.12。影響ありとして記載：9.12.3.9。影響ありとして記載：9.12.2.1。影響ありとして記載：9.12.4.2。影響ありとして記載：9.12.4.4。影響ありとして記載：9.12.4.7。影響ありとして記載：9.12.4.10。影響ありとして記載：9.12.4.13。影響ありとして記載：9.12.4.8。影響ありとして記載：9.12.4.18。影響ありとして記載：9.12.4.24。影響ありとして記載：9.12.4.26。影響ありとして記載：9.12.4.29。影響ありとして記載：9.12.4.30。影響ありとして記載：9.12.4.35。影響ありとして記載：9.12.4.37。影響ありとして記載：9.12.4.38。影響ありとして記載：9.12.4.39。影響ありとして記載：9.12.4.40。影響ありとして記載：9.12.4.41。影響ありとして記載：9.12.4.47。影響ありとして記載：9.12.4.48。影響ありとして記載：9.12.4.50。影響ありとして記載：9.12.4.52。影響ありとして記載：9.12.4.54。影響ありとして記載：9.12.4.55。影響ありとして記載：9.12.4.56。影響ありとして記載：9.12.4.58。影響ありとして記載：9.12.4.62。影響ありとして記載：9.12.4.65。影響ありとして記載：9.12.4.67。影響ありとして記載：9.14.1。影響ありとして記載：9.14.1.10。影響ありとして記載：9.14.1.6。影響ありとして記載：9.14.1.15。影響ありとして記載：9.14.1.19。影響ありとして記載：9.14.1.30。影響ありとして記載：9.14.2。影響ありとして記載：9.14.2.4。影響ありとして記載：9.14.2.8。影響ありとして記載：9.14.2.13。影響ありとして記載：9.14.2.15。影響ありとして記載：9.14.3。影響ありとして記載：9.14.3.1。影響ありとして記載：9.14.3.9。影響ありとして記載：9.14.3.11。影響ありとして記載：9.14.3.13。影響ありとして記載：9.14.3.18。影響ありとして記載：9.14.3.15。影響ありとして記載：9.14.4。影響ありとして記載：9.14.4.6。影響ありとして記載：9.14.4.7。影響ありとして記載：9.14.4.12。影響ありとして記載：9.14.4.13。影響ありとして記載：9.14.4.14。影響ありとして記載：9.14.4.15。影響ありとして記載：9.14.4.17。影響ありとして記載：9.14.4.22。影響ありとして記載：9.14.4.23。影響ありとして記載：9.14.4.24。影響ありとして記載：9.15.1。影響ありとして記載：9.15.1.7。影響ありとして記載：9.15.1.10。影響ありとして記載：9.15.1.15。影響ありとして記載：9.15.1.16。影響ありとして記載：9.15.1.17。影響ありとして記載：9.15.1.1。影響ありとして記載：9.15.1.21。影響ありとして記載：9.16.1。影響ありとして記載：9.16.1.28。影響ありとして記載：9.16.2。影響ありとして記載：9.16.2.3。影響ありとして記載：9.16.2.7。影響ありとして記載：9.16.2.11。影響ありとして記載：9.16.2.13。影響ありとして記載：9.16.2.14。影響ありとして記載：9.16.3。影響ありとして記載：9.16.3.3。影響ありとして記載：9.16.3.14。影響ありとして記載：9.16.3.15。影響ありとして記載：9.16.3.19。影響ありとして記載：9.16.3.23。影響ありとして記載：9.16.4。影響ありとして記載：9.16.4.9。影響ありとして記載：9.16.4.14。影響ありとして記載：9.16.4.18。影響ありとして記載：9.16.4.19。影響ありとして記載：9.16.4.27。影響ありとして記載：9.16.4.38。影響ありとして記載：9.16.4.39。影響ありとして記載：9.16.4.42。影響ありとして記載：9.16.4.48。影響ありとして記載：9.16.4.55。影響ありとして記載：9.16.4.57。影響ありとして記載：9.16.4.61。影響ありとして記載：9.17.1。影響ありとして記載：9.17.1.7。影響ありとして記載：9.17.1.9。影響ありとして記載：9.17.1.10。影響ありとして記載：9.17.1.11。影響ありとして記載：9.17.1.13。影響ありとして記載：9.17.1.15。影響ありとして記載：9.17.1.20。影響ありとして記載：9.17.1.30。影響ありとして記載：9.17.1.33。影響ありとして記載：9.17.1.39。影響ありとして記載：9.18.1。影響ありとして記載：9.18.1.3。影響ありとして記載：9.18.2。影響ありとして記載：9.18.2.5。影響ありとして記載：9.18.2.7。影響ありとして記載：9.18.2.8。影響ありとして記載：9.18.3。影響ありとして記載：9.18.3.39。影響ありとして記載：9.18.3.46。影響ありとして記載：9.18.3.53。影響ありとして記載：9.18.3.55。影響ありとして記載：9.18.3.56。影響ありとして記載：9.18.4。影響ありとして記載：9.18.4.5。影響ありとして記載：9.18.4.8。影響ありとして記載：9.18.4.22。影響ありとして記載：9.18.4.24。影響ありとして記載：9.19.1。影響ありとして記載：9.19.1.5。影響ありとして記載：9.19.1.9。影響ありとして記載：9.19.1.12。影響ありとして記載：9.19.1.18。影響ありとして記載：9.19.1.22。影響ありとして記載：9.19.1.24。影響ありとして記載：9.19.1.27。影響ありとして記載：9.19.1.28。影響ありとして記載：9.19.1.31。影響ありとして記載：9.20.1。影響ありとして記載：9.20.1.5。影響ありとして記載：9.20.2。影響ありとして記載：9.20.2.10。影響ありとして記載：9.20.2.21。\n・公式の対象表：Cisco / Cisco Firepower Threat Defense Software。影響ありとして記載：6.2.3。影響ありとして記載：6.2.3.1。影響ありとして記載：6.2.3.2。影響ありとして記載：6.2.3.3。影響ありとして記載：6.2.3.4。影響ありとして記載：6.2.3.5。影響ありとして記載：6.2.3.6。影響ありとして記載：6.2.3.7。影響ありとして記載：6.2.3.8。影響ありとして記載：6.2.3.10。影響ありとして記載：6.2.3.11。影響ありとして記載：6.2.3.9。影響ありとして記載：6.2.3.12。影響ありとして記載：6.2.3.13。影響ありとして記載：6.2.3.14。影響ありとして記載：6.2.3.15。影響ありとして記載：6.2.3.16。影響ありとして記載：6.2.3.17。影響ありとして記載：6.2.3.18。影響ありとして記載：6.6.0。影響ありとして記載：6.6.0.1。影響ありとして記載：6.6.1。影響ありとして記載：6.6.3。影響ありとして記載：6.6.4。影響ありとして記載：6.6.5。影響ありとして記載：6.6.5.1。影響ありとして記載：6.6.5.2。影響ありとして記載：6.6.7。影響ありとして記載：6.6.7.1。影響ありとして記載：6.6.7.2。影響ありとして記載：6.4.0。影響ありとして記載：6.4.0.1。影響ありとして記載：6.4.0.3。影響ありとして記載：6.4.0.2。影響ありとして記載：6.4.0.4。影響ありとして記載：6.4.0.5。影響ありとして記載：6.4.0.6。影響ありとして記載：6.4.0.7。影響ありとして記載：6.4.0.8。影響ありとして記載：6.4.0.9。影響ありとして記載：6.4.0.10。影響ありとして記載：6.4.0.11。影響ありとして記載：6.4.0.12。影響ありとして記載：6.4.0.13。影響ありとして記載：6.4.0.14。影響ありとして記載：6.4.0.15。影響ありとして記載：6.4.0.16。影響ありとして記載：6.4.0.17。影響ありとして記載：6.4.0.18。影響ありとして記載：6.7.0。影響ありとして記載：6.7.0.1。影響ありとして記載：6.7.0.2。影響ありとして記載：6.7.0.3。影響ありとして記載：7.0.0。影響ありとして記載：7.0.0.1。影響ありとして記載：7.0.1。影響ありとして記載：7.0.1.1。影響ありとして記載：7.0.2。影響ありとして記載：7.0.2.1。影響ありとして記載：7.0.3。影響ありとして記載：7.0.4。影響ありとして記載：7.0.5。影響ありとして記載：7.0.6。影響ありとして記載：7.0.6.1。影響ありとして記載：7.0.6.2。影響ありとして記載：7.1.0。影響ありとして記載：7.1.0.1。影響ありとして記載：7.1.0.2。影響ありとして記載：7.1.0.3。影響ありとして記載：7.2.0。影響ありとして記載：7.2.0.1。影響ありとして記載：7.2.1。影響ありとして記載：7.2.2。影響ありとして記載：7.2.3。影響ありとして記載：7.2.4。影響ありとして記載：7.2.4.1。影響ありとして記載：7.2.5。影響ありとして記載：7.2.5.1。影響ありとして記載：7.2.6。影響ありとして記載：7.2.7。影響ありとして記載：7.2.5.2。影響ありとして記載：7.2.8。影響ありとして記載：7.2.8.1。影響ありとして記載：7.3.0。影響ありとして記載：7.3.1。影響ありとして記載：7.3.1.1。影響ありとして記載：7.3.1.2。影響ありとして記載：7.4.0。影響ありとして記載：7.4.1。影響ありとして記載：7.4.1.1。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-20481", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:07:20.216Z", "lastSuccess": "2026-10-24T05:07:20.216Z", "sourceCheckedAt": "2026-10-24T05:07:20.216Z", "errorCode": null }, "glossary": [ { "term": "サービス拒否（DoS）", "meaning": "サービスや機能が停止したり、処理が遅くなったりして、通常どおり利用できなくなることです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/400.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-37383", "aliases": [], "title": "n/a：ブラウザー上での不正な処理", "summary": "Roundcube Webmail の 1.5.7 未満および 1.6 系列の 1.6.7 未満のバージョンでは、SVG の animate 属性を利用した XSS が可能です。", "risk": "リモートの攻撃者が悪意のある JavaScript を実行させ、ページを閲覧したユーザーのブラウザーで不正な処理が動かされます。", "product": "Roundcube Webmail", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止します。", "「CVE-2024-37383」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37383.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-37383", "label": "CVE公式レコード" }, { "url": "https://github.com/roundcube/roundcubemail/commit/43aaaa528646877789ec028d87924ba1accf5242", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.6.7", "label": "CISAが示す関連情報" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.5.7", "label": "CISAが示す関連情報" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00008.html", "label": "[debian-lts-announce] 20240617 [SECURITY] [DLA 3835-1] roundcube security update" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37383", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-06-07T00:00:00.000Z", "modifiedAt": "2025-10-21T23:05:16.615Z", "fetchedAt": "2026-10-24T05:07:21.059Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-37383", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37383.json", "fetchedAt": "2026-10-24T05:07:21.059Z", "publishedAt": "2024-06-07T00:00:00.000Z", "modifiedAt": "2025-10-21T23:05:16.615Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate attributes that allows a remote attacker to run malicious JavaScript code.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/roundcube/roundcubemail/commit/43aaaa528646877789ec028d87924ba1accf5242", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.6.7", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.5.7", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00008.html", "label": "[debian-lts-announce] 20240617 [SECURITY] [DLA 3835-1] roundcube security update", "tags": [ "mailing-list", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-37383", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37383.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37383.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37383.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37383.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":6.1,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\",\"integrityImpact\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"LOW\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-37383:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "sourcePath": "retained:/originalText", "text": "RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate attributes that allows a remote attacker to run malicious JavaScript code.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-37383:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "modifiedAt": "2024-10-24T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:16.615Z", "fetchedAt": "2026-10-24T05:07:21.059Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-24T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:07:21.059Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "5b45bf62c7f64905a4cf5ce32b2e0a026da2981eed62aed1a0d78dfc48037595", "sourceModifiedAt": "2025-10-21T23:05:16.615Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Roundcube Webmail の 1.5.7 未満および 1.6 系列の 1.6.7 未満のバージョンでは、SVG の animate 属性を利用した XSS が可能です。", "risk": "リモートの攻撃者が悪意のある JavaScript を実行させ、ページを閲覧したユーザーのブラウザーで不正な処理が動かされます。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "影響を受けるのは、Roundcube Webmail の 1.5.7 未満および 1.6 系列の 1.6.7 未満のバージョンで、攻撃者が SVG の animate 属性を含むコンテンツを提供できる場合です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37383.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37383.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37383.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Roundcube Webmail」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-37383", "https://github.com/roundcube/roundcubemail/commit/43aaaa528646877789ec028d87924ba1accf5242", "https://github.com/roundcube/roundcubemail/releases/tag/1.6.7", "https://github.com/roundcube/roundcubemail/releases/tag/1.5.7", "https://lists.debian.org/debian-lts-announce/2024/06/msg00008.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "https://nvd.nist.gov/vuln/detail/CVE-2024-37383" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止します。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383" ], "evidenceIds": [ "E4", "E5" ] }, { "text": "「CVE-2024-37383」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-37383", "https://github.com/roundcube/roundcubemail/commit/43aaaa528646877789ec028d87924ba1accf5242", "https://github.com/roundcube/roundcubemail/releases/tag/1.6.7", "https://github.com/roundcube/roundcubemail/releases/tag/1.5.7", "https://lists.debian.org/debian-lts-announce/2024/06/msg00008.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "https://nvd.nist.gov/vuln/detail/CVE-2024-37383" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-37383", "https://github.com/roundcube/roundcubemail/commit/43aaaa528646877789ec028d87924ba1accf5242", "https://github.com/roundcube/roundcubemail/releases/tag/1.6.7", "https://github.com/roundcube/roundcubemail/releases/tag/1.5.7", "https://lists.debian.org/debian-lts-announce/2024/06/msg00008.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "https://nvd.nist.gov/vuln/detail/CVE-2024-37383" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-37383", "https://github.com/roundcube/roundcubemail/commit/43aaaa528646877789ec028d87924ba1accf5242", "https://github.com/roundcube/roundcubemail/releases/tag/1.6.7", "https://github.com/roundcube/roundcubemail/releases/tag/1.5.7", "https://lists.debian.org/debian-lts-announce/2024/06/msg00008.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "https://nvd.nist.gov/vuln/detail/CVE-2024-37383" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37383.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-37383", "https://github.com/roundcube/roundcubemail/commit/43aaaa528646877789ec028d87924ba1accf5242", "https://github.com/roundcube/roundcubemail/releases/tag/1.6.7", "https://github.com/roundcube/roundcubemail/releases/tag/1.5.7", "https://lists.debian.org/debian-lts-announce/2024/06/msg00008.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "https://nvd.nist.gov/vuln/detail/CVE-2024-37383" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37383.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-37383", "label": "CVE公式レコード" }, { "url": "https://github.com/roundcube/roundcubemail/commit/43aaaa528646877789ec028d87924ba1accf5242", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.6.7", "label": "CISAが示す関連情報" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.5.7", "label": "CISAが示す関連情報" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00008.html", "label": "[debian-lts-announce] 20240617 [SECURITY] [DLA 3835-1] roundcube security update" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37383", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37383.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "sourceField": "retained:/originalText", "excerpt": "RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate attributes that allows a remote attacker to run malicious JavaScript code.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37383.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37383", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-37383\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-37383（Roundcube Webmail）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・影響を受けるのは、Roundcube Webmail の 1.5.7 未満および 1.6 系列の 1.6.7 未満のバージョンで、攻撃者が SVG の animate 属性を含むコンテンツを提供できる場合です。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-37383", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:07:21.059Z", "lastSuccess": "2026-10-24T05:07:21.059Z", "sourceCheckedAt": "2026-10-24T05:07:21.059Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-47575", "aliases": [], "title": "FortiManager：コード実行", "summary": "FortiManager の特定バージョンで重要な機能の認証が欠如しており、リモートの認証されていない攻撃者が細工したリクエストを送ることで任意のコードやコマンドを実行できる。", "risk": "攻撃者が任意のコードやコマンドを実行できる。", "product": "FortiManager", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "fortinet", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C", "affected": [ { "product": "FortiManager", "range": "7.6.0" }, { "product": "FortiManager", "range": ">= 7.4.0 / <= 7.4.4" }, { "product": "FortiManager", "range": ">= 7.2.0 / <= 7.2.7" }, { "product": "FortiManager", "range": ">= 7.0.0 / <= 7.0.12" }, { "product": "FortiManager", "range": ">= 6.4.0 / <= 6.4.14" }, { "product": "FortiManager", "range": ">= 6.2.0 / <= 6.2.12" } ], "fixed": [], "steps": [ "FortiManager および FortiManager Cloud を、各製品の以下のバージョン以上にアップグレードしてください：FortiManager 6.2.13、6.4.15、7.0.13、7.2.8、7.4.5、7.6.1、FortiManager Cloud 7.0.13、7.2.8、7.4.5、7.6.2。", "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2024-47575」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json", "label": "CVE：fortinet" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-47575", "label": "CVE公式レコード" }, { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-423", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47575", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-10-23T15:03:48.798Z", "modifiedAt": "2025-10-21T22:55:42.072Z", "fetchedAt": "2026-10-24T05:07:35.461Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Fortinet", "product": "FortiManager", "cpes": [ "cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*" ], "defaultStatus": "unaffected", "versions": [ { "version": "7.6.0", "status": "affected" }, { "versionType": "semver", "version": "7.4.0", "lessThanOrEqual": "7.4.4", "status": "affected" }, { "versionType": "semver", "version": "7.2.0", "lessThanOrEqual": "7.2.7", "status": "affected" }, { "versionType": "semver", "version": "7.0.0", "lessThanOrEqual": "7.0.12", "status": "affected" }, { "versionType": "semver", "version": "6.4.0", "lessThanOrEqual": "6.4.14", "status": "affected" }, { "versionType": "semver", "version": "6.2.0", "lessThanOrEqual": "6.2.12", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-47575", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json", "fetchedAt": "2026-10-24T05:07:35.461Z", "publishedAt": "2024-10-23T15:03:48.798Z", "modifiedAt": "2025-10-21T22:55:42.072Z", "state": "published", "provider": "fortinet", "title": "", "descriptions": [ { "lang": "en", "value": "A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Fortinet", "product": "FortiManager", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "7.6.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "7.4.0", "lessThanOrEqual": "7.4.4", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "7.2.0", "lessThanOrEqual": "7.2.7", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "7.0.0", "lessThanOrEqual": "7.0.12", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "6.4.0", "lessThanOrEqual": "6.4.14", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "6.2.0", "lessThanOrEqual": "6.2.12", "versionType": "semver", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Please upgrade to FortiManager Cloud version 7.6.2 or above \nPlease upgrade to FortiManager Cloud version 7.4.5 or above \nPlease upgrade to FortiManager Cloud version 7.2.8 or above \nPlease upgrade to FortiManager Cloud version 7.0.13 or above \nPlease upgrade to FortiManager version 7.6.1 or above \nPlease upgrade to FortiManager version 7.4.5 or above \nPlease upgrade to FortiManager version 7.2.8 or above \nPlease upgrade to FortiManager version 7.0.13 or above \nPlease upgrade to FortiManager version 6.4.15 or above \nPlease upgrade to FortiManager version 6.2.13 or above", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-306", "lang": "en", "description": "Execute unauthorized code or commands", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "fortinet", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-423", "label": "https://fortiguard.fortinet.com/psirt/FG-IR-24-423", "tags": [], "provider": "fortinet", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-47575", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Fortinet\",\"product\":\"FortiManager\",\"cpes\":[\"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*\"],\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"7.6.0\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.4.0\",\"lessThanOrEqual\":\"7.4.4\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.2.0\",\"lessThanOrEqual\":\"7.2.7\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.12\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"6.4.0\",\"lessThanOrEqual\":\"6.4.14\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"6.2.0\",\"lessThanOrEqual\":\"6.2.12\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Please upgrade to FortiManager Cloud version 7.6.2 or above \nPlease upgrade to FortiManager Cloud version 7.4.5 or above \nPlease upgrade to FortiManager Cloud version 7.2.8 or above \nPlease upgrade to FortiManager Cloud version 7.0.13 or above \nPlease upgrade to FortiManager version 7.6.1 or above \nPlease upgrade to FortiManager version 7.4.5 or above \nPlease upgrade to FortiManager version 7.2.8 or above \nPlease upgrade to FortiManager version 7.0.13 or above \nPlease upgrade to FortiManager version 6.4.15 or above \nPlease upgrade to FortiManager version 6.2.13 or above", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-306\",\"description\":\"Execute unauthorized code or commands\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-47575:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "sourcePath": "retained:/originalText", "text": "Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-47575:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "modifiedAt": "2024-10-23T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:42.072Z", "fetchedAt": "2026-10-24T05:07:35.461Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-23T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "FortiManagerにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:07:35.461Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "78d44588e4d8dc2e7d1b981e4560c124c963e1d71fd5bfee6b1e58d7d7e60727", "sourceModifiedAt": "2025-10-21T22:55:42.072Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "FortiManager の特定バージョンで重要な機能の認証が欠如しており、リモートの認証されていない攻撃者が細工したリクエストを送ることで任意のコードやコマンドを実行できる。", "risk": "攻撃者が任意のコードやコマンドを実行できる。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象は FortiManager 7.6.0、7.4.0〜7.4.4、7.2.0〜7.2.7、7.0.0〜7.0.12、6.4.0〜6.4.14、6.2.0〜6.2.12、FortiManager Cloud 7.4.1〜7.4.4、7.2.1〜7.2.7、7.0.1〜7.0.12、6.4.1〜6.4.7 で、重要な機能の認証が欠如している状態です。リモートから認証されていない攻撃者が細工したリクエストを送信できる場合に脆弱性が成立します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Fortinet / FortiManager。影響ありとして記載：7.6.0。影響ありとして記載：7.4.0以上、7.4.4以下。影響ありとして記載：7.2.0以上、7.2.7以下。影響ありとして記載：7.0.0以上、7.0.12以下。影響ありとして記載：6.4.0以上、6.4.14以下。影響ありとして記載：6.2.0以上、6.2.12以下。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json" ], "evidenceIds": [ "E2" ] }, { "text": "「FortiManager」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-47575", "https://fortiguard.fortinet.com/psirt/FG-IR-24-423", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "https://nvd.nist.gov/vuln/detail/CVE-2024-47575" ] } ], "actions": [ { "text": "FortiManager および FortiManager Cloud を、各製品の以下のバージョン以上にアップグレードしてください：FortiManager 6.2.13、6.4.15、7.0.13、7.2.8、7.4.5、7.6.1、FortiManager Cloud 7.0.13、7.2.8、7.4.5、7.6.2。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json" ], "evidenceIds": [ "E3" ] }, { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575" ], "evidenceIds": [ "E4", "E5" ] }, { "text": "「CVE-2024-47575」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-47575", "https://fortiguard.fortinet.com/psirt/FG-IR-24-423", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "https://nvd.nist.gov/vuln/detail/CVE-2024-47575" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-47575", "https://fortiguard.fortinet.com/psirt/FG-IR-24-423", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "https://nvd.nist.gov/vuln/detail/CVE-2024-47575" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-47575", "https://fortiguard.fortinet.com/psirt/FG-IR-24-423", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "https://nvd.nist.gov/vuln/detail/CVE-2024-47575" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-47575", "https://fortiguard.fortinet.com/psirt/FG-IR-24-423", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "https://nvd.nist.gov/vuln/detail/CVE-2024-47575" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json", "label": "CVE：fortinet" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-47575", "label": "CVE公式レコード" }, { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-423", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47575", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Fortinet\",\"product\":\"FortiManager\",\"cpes\":[\"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*\"],\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"7.6.0\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.4.0\",\"lessThanOrEqual\":\"7.4.4\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.2.0\",\"lessThanOrEqual\":\"7.2.7\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.12\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"6.4.0\",\"lessThanOrEqual\":\"6.4.14\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"6.2.0\",\"lessThanOrEqual\":\"6.2.12\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/47xxx/CVE-2024-47575.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Please upgrade to FortiManager Cloud version 7.6.2 or above \nPlease upgrade to FortiManager Cloud version 7.4.5 or above \nPlease upgrade to FortiManager Cloud version 7.2.8 or above \nPlease upgrade to FortiManager Cloud version 7.0.13 or above \nPlease upgrade to FortiManager version 7.6.1 or above \nPlease upgrade to FortiManager version 7.4.5 or above \nPlease upgrade to FortiManager version 7.2.8 or above \nPlease upgrade to FortiManager version 7.0.13 or above \nPlease upgrade to FortiManager version 6.4.15 or above \nPlease upgrade to FortiManager version 6.2.13 or above", "language": "en", "representation": "source_excerpt" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-47575", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-47575\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-47575（FortiManager）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は FortiManager 7.6.0、7.4.0〜7.4.4、7.2.0〜7.2.7、7.0.0〜7.0.12、6.4.0〜6.4.14、6.2.0〜6.2.12、FortiManager Cloud 7.4.1〜7.4.4、7.2.1〜7.2.7、7.0.1〜7.0.12、6.4.1〜6.4.7 で、重要な機能の認証が欠如している状態です。リモートから認証されていない攻撃者が細工したリクエストを送信できる場合に脆弱性が成立します。\n・公式の対象表：Fortinet / FortiManager。影響ありとして記載：7.6.0。影響ありとして記載：7.4.0以上、7.4.4以下。影響ありとして記載：7.2.0以上、7.2.7以下。影響ありとして記載：7.0.0以上、7.0.12以下。影響ありとして記載：6.4.0以上、6.4.14以下。影響ありとして記載：6.2.0以上、6.2.12以下。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-47575", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:07:35.461Z", "lastSuccess": "2026-10-24T05:07:35.461Z", "sourceCheckedAt": "2026-10-24T05:07:35.461Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-38094", "aliases": [], "title": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition：コード実行", "summary": "Microsoft SharePoint にリモートコード実行の脆弱性があります。", "risk": "リモートコード実行が可能になる可能性があります。", "product": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition", "category": "windows", "component": "package", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "affected": [ { "product": "Microsoft SharePoint Enterprise Server 2016", "range": ">= 16.0.0 / < 16.0.5456.1000（環境: x64-based Systems）" }, { "product": "Microsoft SharePoint Server 2019", "range": ">= 16.0.0 / < 16.0.10412.20001（環境: x64-based Systems）" }, { "product": "Microsoft SharePoint Server Subscription Edition", "range": ">= 16.0.0 / < 16.0.17328.20424（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "「CVE-2024-38094」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-38094", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38094", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-07-09T17:03:24.222Z", "modifiedAt": "2026-02-10T23:35:15.256Z", "fetchedAt": "2026-10-24T05:07:39.918Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Microsoft SharePoint Remote Code Execution Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "16.0.0", "lessThan": "16.0.5456.1000", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "16.0.0", "lessThan": "16.0.10412.20001", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "16.0.0", "lessThan": "16.0.17328.20424", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: x64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-38094", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json", "fetchedAt": "2026-10-24T05:07:39.918Z", "publishedAt": "2024-07-09T17:03:24.222Z", "modifiedAt": "2026-02-10T23:35:15.256Z", "state": "published", "provider": "microsoft", "title": "Microsoft SharePoint Remote Code Execution Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Microsoft SharePoint Remote Code Execution Vulnerability", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "sourcePath": "/containers/cna/affected/0", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "16.0.0", "lessThan": "16.0.5456.1000", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server 2019", "sourcePath": "/containers/cna/affected/1", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "16.0.0", "lessThan": "16.0.10412.20001", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "sourcePath": "/containers/cna/affected/2", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "16.0.0", "lessThan": "16.0.17328.20424", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-502", "lang": "en-US", "description": "CWE-502: Deserialization of Untrusted Data", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "baseScore": 7.2, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094", "label": "Microsoft SharePoint Remote Code Execution Vulnerability", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38094", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Enterprise Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.5456.1000\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.10412.20001\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server Subscription Edition\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.17328.20424\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Microsoft SharePoint Remote Code Execution Vulnerability", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-502: Deserialization of Untrusted Data\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-502\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.2,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-38094:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094", "sourcePath": "retained:/originalText", "text": "Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-38094:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094", "modifiedAt": "2024-10-22T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-10T23:35:15.256Z", "fetchedAt": "2026-10-24T05:07:39.918Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-22T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Editionにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:07:39.918Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "2e33f726a03435c65e07f77050857f397a28f0d7197dbb10a4a5a0f71c6a0711", "sourceModifiedAt": "2026-02-10T23:35:15.256Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft SharePoint にリモートコード実行の脆弱性があります。", "risk": "リモートコード実行が可能になる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "公式の対象表：Microsoft / Microsoft SharePoint Enterprise Server 2016。影響ありとして記載：16.0.0以上、16.0.5456.1000未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Microsoft SharePoint Server 2019。影響ありとして記載：16.0.0以上、16.0.10412.20001未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Microsoft SharePoint Server Subscription Edition。影響ありとして記載：16.0.0以上、16.0.17328.20424未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json" ], "evidenceIds": [ "E6" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094" ], "evidenceIds": [ "E8" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-38094", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094", "https://nvd.nist.gov/vuln/detail/CVE-2024-38094" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094" ], "evidenceIds": [ "E7" ] }, { "text": "「CVE-2024-38094」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-38094", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094", "https://nvd.nist.gov/vuln/detail/CVE-2024-38094" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-38094", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094", "https://nvd.nist.gov/vuln/detail/CVE-2024-38094" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-38094", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094", "https://nvd.nist.gov/vuln/detail/CVE-2024-38094" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-38094", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094", "https://nvd.nist.gov/vuln/detail/CVE-2024-38094" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-38094", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38094", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json", "sourceField": "/containers/cna/title", "excerpt": "Microsoft SharePoint Remote Code Execution Vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Microsoft SharePoint Remote Code Execution Vulnerability", "language": "en-US", "representation": "source_excerpt" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094", "sourceField": "retained:/originalText", "excerpt": "Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Enterprise Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.5456.1000\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.10412.20001\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38094.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server Subscription Edition\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.17328.20424\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38094", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-38094\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-38094（Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Microsoft / Microsoft SharePoint Enterprise Server 2016。影響ありとして記載：16.0.0以上、16.0.5456.1000未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft SharePoint Server 2019。影響ありとして記載：16.0.0以上、16.0.10412.20001未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft SharePoint Server Subscription Edition。影響ありとして記載：16.0.0以上、16.0.17328.20424未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-38094", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:07:39.918Z", "lastSuccess": "2026-10-24T05:07:39.918Z", "sourceCheckedAt": "2026-10-24T05:07:39.918Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-9537", "aliases": [], "title": "SL1：脆弱性情報", "summary": "ScienceLogic SL1（旧 EM7）は、SL1 に同梱されている特定できないサードパーティ製コンポーネントに起因する未特定の脆弱性の影響を受けます。この脆弱性は SL1 バージョン 12.1.3 以降、12.2.3 以降、12.3 以降で修正されています。また、バージョン 10.1 系、10.2 系、11.1 系、11.2 系、11.3 系にも対応する修正が提供されています。", "risk": "この脆弱性は実際に悪用されていることが確認されています。", "product": "SL1", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "cisa-cg", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "SL1", "range": "< 12.1.3" }, { "product": "SL1", "range": "< 12.2.3" }, { "product": "SL1", "range": "< 12.3" }, { "product": "SL1", "range": "< 10.1.x" }, { "product": "SL1", "range": "< 10.2.x" }, { "product": "SL1", "range": "< 11.1.x" }, { "product": "SL1", "range": "< 11.2.x" }, { "product": "SL1", "range": "< 11.3.x" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2024-9537」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9537.json", "label": "CVE：cisa-cg" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-9537", "label": "CVE公式レコード" }, { "url": "https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6", "label": "CVE掲載の参考情報" }, { "url": "https://twitter.com/ynezzor/status/1839931641172467907", "label": "CVE掲載の参考情報" }, { "url": "https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/", "label": "CVE掲載の参考情報" }, { "url": "https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/", "label": "CVE掲載の参考情報" }, { "url": "https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/", "label": "CVE掲載の参考情報" }, { "url": "https://support.sciencelogic.com/s/article/15465", "label": "CVE掲載の参考情報" }, { "url": "https://support.sciencelogic.com/s/article/15527", "label": "CISAが示す関連情報" }, { "url": "https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9537", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-10-18T14:45:02.147Z", "modifiedAt": "2025-10-21T22:55:42.397Z", "fetchedAt": "2026-10-24T05:07:46.942Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.", "sourceTitle": "ScienceLogic SL1 unspecified vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unknown", "product": "SL1", "vendor": "ScienceLogic", "versions": [ { "lessThan": "12.1.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "12.2.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "12.3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "10.1.x", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "10.2.x", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "11.1.x", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "11.2.x", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "11.3.x", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-9537", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9537.json", "fetchedAt": "2026-10-24T05:07:46.942Z", "publishedAt": "2024-10-18T14:45:02.147Z", "modifiedAt": "2025-10-21T22:55:42.397Z", "state": "published", "provider": "cisa-cg", "title": "ScienceLogic SL1 unspecified vulnerability", "descriptions": [ { "lang": "en", "value": "ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "ScienceLogic", "product": "SL1", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "12.1.3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "0", "lessThan": "12.2.3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "0", "lessThan": "12.3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "0", "lessThan": "10.1.x", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "0", "lessThan": "10.2.x", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "0", "lessThan": "11.1.x", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "0", "lessThan": "11.2.x", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "0", "lessThan": "11.3.x", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "cisa-cg", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" }, { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Red", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "cisa-cg", "sourcePath": "/containers/cna/metrics/1/cvssV4_0" } ], "references": [ { "url": "https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6", "label": "cisa-cg", "tags": [], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/0" }, { "url": "https://twitter.com/ynezzor/status/1839931641172467907", "label": "cisa-cg", "tags": [], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/", "label": "cisa-cg", "tags": [ "media-coverage" ], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/2" }, { "url": "https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/", "label": "cisa-cg", "tags": [ "third-party-advisory" ], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/3" }, { "url": "https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/", "label": "cisa-cg", "tags": [ "media-coverage" ], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/4" }, { "url": "https://support.sciencelogic.com/s/article/15465", "label": "cisa-cg", "tags": [ "vendor-advisory" ], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/5" }, { "url": "https://support.sciencelogic.com/s/article/15527", "label": "cisa-cg", "tags": [ "vendor-advisory" ], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/6" }, { "url": "https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690", "label": "cisa-cg", "tags": [ "release-notes" ], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/7" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "label": "cisa-cg", "tags": [ "government-resource" ], "provider": "cisa-cg", "sourcePath": "/containers/cna/references/8" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9537", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9537.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unknown\",\"product\":\"SL1\",\"vendor\":\"ScienceLogic\",\"versions\":[{\"lessThan\":\"12.1.3\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"12.2.3\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"12.3\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"10.1.x\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"10.2.x\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"11.1.x\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"11.2.x\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"11.3.x\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9537.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9537.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9537.json", "sourcePath": "/containers/cna/metrics/1/cvssV4_0", "text": "{\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"attackVector\":\"NETWORK\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"privilegesRequired\":\"NONE\",\"providerUrgency\":\"RED\",\"subAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"valueDensity\":\"NOT_DEFINED\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Red\",\"version\":\"4.0\",\"vulnAvailabilityImpact\":\"HIGH\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-9537:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "sourcePath": "retained:/originalText", "text": "ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-9537:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "modifiedAt": "2024-10-21T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:42.397Z", "fetchedAt": "2026-10-24T05:07:46.942Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-21T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "SL1に脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:07:46.942Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "5cb9521770cec2f51f19f1a13cb6d4b158713faa68929eed753c994a0ad8e4be", "sourceModifiedAt": "2025-10-21T22:55:42.397Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ScienceLogic SL1（旧 EM7）は、SL1 に同梱されている特定できないサードパーティ製コンポーネントに起因する未特定の脆弱性の影響を受けます。この脆弱性は SL1 バージョン 12.1.3 以降、12.2.3 以降、12.3 以降で修正されています。また、バージョン 10.1 系、10.2 系、11.1 系、11.2 系、11.3 系にも対応する修正が提供されています。", "risk": "この脆弱性は実際に悪用されていることが確認されています。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "公式の対象表：ScienceLogic / SL1。影響ありとして記載：12.1.3未満の版。影響ありとして記載：12.2.3未満の版。影響ありとして記載：12.3未満の版。影響ありとして記載：10.1.x未満の版。影響ありとして記載：10.2.x未満の版。影響ありとして記載：11.1.x未満の版。影響ありとして記載：11.2.x未満の版。影響ありとして記載：11.3.x未満の版。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9537.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9537.json" ], "evidenceIds": [ "E4" ] }, { "text": "「SL1」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-9537", "https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6", "https://twitter.com/ynezzor/status/1839931641172467907", "https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/", "https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/", "https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/", "https://support.sciencelogic.com/s/article/15465", "https://support.sciencelogic.com/s/article/15527", "https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "https://nvd.nist.gov/vuln/detail/CVE-2024-9537" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537" ], "evidenceIds": [ "E5" ] }, { "text": "「CVE-2024-9537」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-9537", "https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6", "https://twitter.com/ynezzor/status/1839931641172467907", "https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/", "https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/", "https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/", "https://support.sciencelogic.com/s/article/15465", "https://support.sciencelogic.com/s/article/15527", "https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "https://nvd.nist.gov/vuln/detail/CVE-2024-9537" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-9537", "https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6", "https://twitter.com/ynezzor/status/1839931641172467907", "https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/", "https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/", "https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/", "https://support.sciencelogic.com/s/article/15465", "https://support.sciencelogic.com/s/article/15527", "https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "https://nvd.nist.gov/vuln/detail/CVE-2024-9537" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-9537", "https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6", "https://twitter.com/ynezzor/status/1839931641172467907", "https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/", "https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/", "https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/", "https://support.sciencelogic.com/s/article/15465", "https://support.sciencelogic.com/s/article/15527", "https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "https://nvd.nist.gov/vuln/detail/CVE-2024-9537" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9537.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-9537", "https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6", "https://twitter.com/ynezzor/status/1839931641172467907", "https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/", "https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/", "https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/", "https://support.sciencelogic.com/s/article/15465", "https://support.sciencelogic.com/s/article/15527", "https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "https://nvd.nist.gov/vuln/detail/CVE-2024-9537" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9537.json", "label": "CVE：cisa-cg" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-9537", "label": "CVE公式レコード" }, { "url": "https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6", "label": "CVE掲載の参考情報" }, { "url": "https://twitter.com/ynezzor/status/1839931641172467907", "label": "CVE掲載の参考情報" }, { "url": "https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/", "label": "CVE掲載の参考情報" }, { "url": "https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/", "label": "CVE掲載の参考情報" }, { "url": "https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/", "label": "CVE掲載の参考情報" }, { "url": "https://support.sciencelogic.com/s/article/15465", "label": "CVE掲載の参考情報" }, { "url": "https://support.sciencelogic.com/s/article/15527", "label": "CISAが示す関連情報" }, { "url": "https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9537", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9537.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9537.json", "sourceField": "/containers/cna/title", "excerpt": "ScienceLogic SL1 unspecified vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-9537\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9537.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unknown\",\"product\":\"SL1\",\"vendor\":\"ScienceLogic\",\"versions\":[{\"lessThan\":\"12.1.3\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"12.2.3\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"12.3\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"10.1.x\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"10.2.x\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"11.1.x\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"11.2.x\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"11.3.x\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" } ], "supportRequest": "件名：CVE-2024-9537（SL1）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：ScienceLogic / SL1。影響ありとして記載：12.1.3未満の版。影響ありとして記載：12.2.3未満の版。影響ありとして記載：12.3未満の版。影響ありとして記載：10.1.x未満の版。影響ありとして記載：10.2.x未満の版。影響ありとして記載：11.1.x未満の版。影響ありとして記載：11.2.x未満の版。影響ありとして記載：11.3.x未満の版。個別に記されていない版の影響は、原資料でも未確定です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-9537", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:07:46.942Z", "lastSuccess": "2026-10-24T05:07:46.942Z", "sourceCheckedAt": "2026-10-24T05:07:46.942Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-40711", "aliases": [], "title": "Backup and Recovery：コード実行", "summary": "信頼できないデータのデシリアライズに悪意あるペイロードが含まれると、認証されていないリモートコード実行が可能になる。", "risk": "攻撃者がリモートでコードを実行できるようになる。", "product": "Backup and Recovery", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.0", "cvssSource": "hackerone", "cvssVector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Backup and Recovery", "range": ">= 12.1.2 / <= 12.1.2" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "「CVE-2024-40711」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/40xxx/CVE-2024-40711.json", "label": "CVE：hackerone" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-40711", "label": "CVE公式レコード" }, { "url": "https://www.veeam.com/kb4649", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40711", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-09-07T16:11:22.213Z", "modifiedAt": "2025-10-21T22:55:45.810Z", "fetchedAt": "2026-10-24T06:11:56.233Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "vendor": "Veeam", "product": "Backup and Recovery", "versions": [ { "version": "12.1.2", "status": "affected", "lessThanOrEqual": "12.1.2", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-40711", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/40xxx/CVE-2024-40711.json", "fetchedAt": "2026-10-24T06:11:56.233Z", "publishedAt": "2024-09-07T16:11:22.213Z", "modifiedAt": "2025-10-21T22:55:45.810Z", "state": "published", "provider": "hackerone", "title": "", "descriptions": [ { "lang": "en", "value": "A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Veeam", "product": "Backup and Recovery", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "12.1.2", "lessThanOrEqual": "12.1.2", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [], "metrics": [ { "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "hackerone", "sourcePath": "/containers/cna/metrics/0/cvssV3_0" } ], "references": [ { "url": "https://www.veeam.com/kb4649", "label": "hackerone", "tags": [], "provider": "hackerone", "sourcePath": "/containers/cna/references/0" }, { "url": "https://labs.watchtowr.com/veeam-backup-response-rce-with-auth-but-mostly-without-auth-cve-2024-40711-2/", "label": "CISA-ADP", "tags": [], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-40711", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/40xxx/CVE-2024-40711.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Veeam\",\"product\":\"Backup and Recovery\",\"versions\":[{\"version\":\"12.1.2\",\"status\":\"affected\",\"lessThanOrEqual\":\"12.1.2\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/40xxx/CVE-2024-40711.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/40xxx/CVE-2024-40711.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_0", "text": "{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-40711:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "sourcePath": "retained:/originalText", "text": "Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-40711:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "modifiedAt": "2024-10-17T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:45.810Z", "fetchedAt": "2026-10-24T06:11:56.233Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-17T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Backup and Recoveryにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T06:11:56.233Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "7d583514e756f72f17f8541682e6aef7e673b880d69b2ec693f593a7cc4cd7aa", "sourceModifiedAt": "2025-10-21T22:55:45.810Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "信頼できないデータのデシリアライズに悪意あるペイロードが含まれると、認証されていないリモートコード実行が可能になる。", "risk": "攻撃者がリモートでコードを実行できるようになる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "攻撃者が認証されていない状態で、製品が信頼できないデータをデシリアライズする機能を使用できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/40xxx/CVE-2024-40711.json" ], "evidenceIds": [ "E1" ] }, { "text": "悪意あるペイロードがデシリアライズ対象のデータに含まれること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/40xxx/CVE-2024-40711.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Veeam / Backup and Recovery。影響ありとして記載：12.1.2（対象表の開始値と上限が同じ版で、上限を含む表記）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/40xxx/CVE-2024-40711.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/40xxx/CVE-2024-40711.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Backup and Recovery」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-40711", "https://www.veeam.com/kb4649", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "https://nvd.nist.gov/vuln/detail/CVE-2024-40711" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711" ], "evidenceIds": [ "E4", "E5" ] }, { "text": "「CVE-2024-40711」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-40711", "https://www.veeam.com/kb4649", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "https://nvd.nist.gov/vuln/detail/CVE-2024-40711" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-40711", "https://www.veeam.com/kb4649", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "https://nvd.nist.gov/vuln/detail/CVE-2024-40711" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-40711", "https://www.veeam.com/kb4649", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "https://nvd.nist.gov/vuln/detail/CVE-2024-40711" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/40xxx/CVE-2024-40711.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-40711", "https://www.veeam.com/kb4649", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "https://nvd.nist.gov/vuln/detail/CVE-2024-40711" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/40xxx/CVE-2024-40711.json", "label": "CVE：hackerone" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-40711", "label": "CVE公式レコード" }, { "url": "https://www.veeam.com/kb4649", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40711", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/40xxx/CVE-2024-40711.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "sourceField": "retained:/originalText", "excerpt": "Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/40xxx/CVE-2024-40711.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Veeam\",\"product\":\"Backup and Recovery\",\"versions\":[{\"version\":\"12.1.2\",\"status\":\"affected\",\"lessThanOrEqual\":\"12.1.2\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-40711", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-40711\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-40711（Backup and Recovery）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者が認証されていない状態で、製品が信頼できないデータをデシリアライズする機能を使用できること。\n・悪意あるペイロードがデシリアライズ対象のデータに含まれること。\n・公式の対象表：Veeam / Backup and Recovery。影響ありとして記載：12.1.2（対象表の開始値と上限が同じ版で、上限を含む表記）。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-40711", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T06:11:56.233Z", "lastSuccess": "2026-10-24T06:11:56.233Z", "sourceCheckedAt": "2026-10-24T06:11:56.233Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-28987", "aliases": [], "title": "Web Help Desk：脆弱性情報", "summary": "SolarWinds Web Help Desk ソフトウェアにハードコードされた認証情報が含まれており、リモートの認証されていないユーザーが内部機能にアクセスし、データを変更できる可能性があります。", "risk": "攻撃者が内部機能に不正にアクセスし、データを改ざんできる。", "product": "Web Help Desk", "category": "other", "component": "package", "severity": "critical", "cvss": 9.1, "cvssVersion": "3.1", "cvssSource": "SolarWinds", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "affected": [ { "product": "Web Help Desk", "range": "12.8.3 Hotfix 1 and previous versions" }, { "product": "Web Help Desk", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "SolarWinds は、利用可能になり次第 SolarWinds Web Help Desk v12.8.3 HF2 にアップグレードすることを推奨しています。", "ベンダーの指示に従った緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2024-28987」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json", "label": "CVE：SolarWinds" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-28987", "label": "CVE公式レコード" }, { "url": "https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987", "label": "CISAが示す関連情報" }, { "url": "https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28987", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-08-21T21:17:23.041Z", "modifiedAt": "2025-10-21T22:55:46.764Z", "fetchedAt": "2026-10-24T05:07:49.013Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.", "sourceTitle": "SolarWinds Web Help Desk Hardcoded Credential Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "product": "Web Help Desk", "vendor": "SolarWinds", "versions": [ { "status": "affected", "version": "12.8.3 Hotfix 1 and previous versions" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-28987", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json", "fetchedAt": "2026-10-24T05:07:49.013Z", "publishedAt": "2024-08-21T21:17:23.041Z", "modifiedAt": "2025-10-21T22:55:46.764Z", "state": "published", "provider": "SolarWinds", "title": "SolarWinds Web Help Desk Hardcoded Credential Vulnerability", "descriptions": [ { "lang": "en", "value": "The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "SolarWinds", "product": "Web Help Desk", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "12.8.3 Hotfix 1 and previous versions", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "SolarWinds recommends that customers upgrade to SolarWinds Web Help Desk v12.8.3 HF2 as soon as it becomes available.", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-798", "lang": "en", "description": "CWE-798 Use of Hard-coded Credentials", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 9.1, "baseSeverity": "CRITICAL", "provider": "SolarWinds", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987", "label": "SolarWinds", "tags": [], "provider": "SolarWinds", "sourcePath": "/containers/cna/references/0" }, { "url": "https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2", "label": "SolarWinds", "tags": [], "provider": "SolarWinds", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-28987", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.theregister.com/2024/08/22/hardcoded_credentials_bug_solarwinds_whd/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"product\":\"Web Help Desk\",\"vendor\":\"SolarWinds\",\"versions\":[{\"status\":\"affected\",\"version\":\"12.8.3 Hotfix 1 and previous versions\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "SolarWinds recommends that customers upgrade to SolarWinds Web Help Desk v12.8.3 HF2 as soon as it becomes available.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-798\",\"description\":\"CWE-798 Use of Hard-coded Credentials\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"NONE\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-28987:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987", "sourcePath": "retained:/originalText", "text": "SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-28987:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987", "modifiedAt": "2024-10-15T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:46.764Z", "fetchedAt": "2026-10-24T05:07:49.013Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-15T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Web Help Deskに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:07:49.013Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "4ac223ec4d50dac934662b86a6cd0b5cc43af89782945bbdbbaf2799251ff311", "sourceModifiedAt": "2025-10-21T22:55:46.764Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "SolarWinds Web Help Desk ソフトウェアにハードコードされた認証情報が含まれており、リモートの認証されていないユーザーが内部機能にアクセスし、データを変更できる可能性があります。", "risk": "攻撃者が内部機能に不正にアクセスし、データを改ざんできる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "リモートの認証されていないユーザーが、認証情報がハードコードされているため追加の権限や設定なしに内部機能へアクセスできる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：SolarWinds / Web Help Desk。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987" ], "evidenceIds": [ "E8" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Web Help Desk」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-28987", "https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987", "https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987", "https://nvd.nist.gov/vuln/detail/CVE-2024-28987" ] } ], "actions": [ { "text": "SolarWinds は、利用可能になり次第 SolarWinds Web Help Desk v12.8.3 HF2 にアップグレードすることを推奨しています。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json" ], "evidenceIds": [ "E5" ] }, { "text": "ベンダーの指示に従った緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987" ], "evidenceIds": [ "E6", "E7" ] }, { "text": "「CVE-2024-28987」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-28987", "https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987", "https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987", "https://nvd.nist.gov/vuln/detail/CVE-2024-28987" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-28987", "https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987", "https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987", "https://nvd.nist.gov/vuln/detail/CVE-2024-28987" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従った緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987" ], "evidenceIds": [ "E6", "E7" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-28987", "https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987", "https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987", "https://nvd.nist.gov/vuln/detail/CVE-2024-28987" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json", "label": "CVE：SolarWinds" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-28987", "label": "CVE公式レコード" }, { "url": "https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987", "label": "CISAが示す関連情報" }, { "url": "https://support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28987", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json", "sourceField": "/containers/cna/title", "excerpt": "SolarWinds Web Help Desk Hardcoded Credential Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987", "sourceField": "retained:/originalText", "excerpt": "SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"product\":\"Web Help Desk\",\"vendor\":\"SolarWinds\",\"versions\":[{\"status\":\"affected\",\"version\":\"12.8.3 Hotfix 1 and previous versions\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28987.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "SolarWinds recommends that customers upgrade to SolarWinds Web Help Desk v12.8.3 HF2 as soon as it becomes available.", "language": "en", "representation": "source_excerpt" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28987", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-28987\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-28987（Web Help Desk）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・リモートの認証されていないユーザーが、認証情報がハードコードされているため追加の権限や設定なしに内部機能へアクセスできる。\n・公式の対象表：SolarWinds / Web Help Desk。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-28987", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:07:49.013Z", "lastSuccess": "2026-10-24T05:07:49.013Z", "sourceCheckedAt": "2026-10-24T05:07:49.013Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-30088", "aliases": [], "title": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows Server 2：権限の奪取", "summary": "Windows カーネルの特権昇格脆弱性です。", "risk": "タイムチェック・タイムユース（TOCTOU）競合状態により、特権昇格が可能になる脆弱性です。", "product": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows Server 2", "category": "windows", "component": "package", "severity": "high", "cvss": 7, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "affected": [ { "product": "Windows 10 Version 1507", "range": ">= 10.0.10240.0 / < 10.0.10240.20680（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1607", "range": ">= 10.0.14393.0 / < 10.0.14393.7070（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.17763.0 / < 10.0.17763.5936（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.0 / < 10.0.17763.5936（環境: ARM64-based Systems）" }, { "product": "Windows 10 Version 21H2", "range": ">= 10.0.19044.0 / < 10.0.19044.4529（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 10 Version 22H2", "range": ">= 10.0.19045.0 / < 10.0.19045.4529（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 21H2", "range": ">= 10.0.22000.0 / < 10.0.22000.3019（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 22H2", "range": ">= 10.0.22621.0 / < 10.0.22621.3737（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.3737（環境: ARM64-based Systems）" }, { "product": "Windows 11 Version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.3737（環境: x64-based Systems）" }, { "product": "Windows Server 2016", "range": ">= 10.0.14393.0 / < 10.0.14393.7070（環境: x64-based Systems）" }, { "product": "Windows Server 2016 (Server Core installation)", "range": ">= 10.0.14393.0 / < 10.0.14393.7070（環境: x64-based Systems）" }, { "product": "Windows Server 2019", "range": ">= 10.0.17763.0 / < 10.0.17763.5936（環境: x64-based Systems）" }, { "product": "Windows Server 2019 (Server Core installation)", "range": ">= 10.0.17763.0 / < 10.0.17763.5936（環境: x64-based Systems）" }, { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.2527（環境: x64-based Systems）" }, { "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "range": ">= 10.0.25398.0 / < 10.0.25398.950（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2024-30088」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-30088", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30088", "label": "Windows Kernel Elevation of Privilege Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-30088", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30088", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2024-06-11T16:59:56.041Z", "modifiedAt": "2026-08-10T15:12:17.405Z", "fetchedAt": "2026-10-24T05:07:51.899Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Windows Kernel Elevation of Privilege Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.10240.0", "lessThan": "10.0.10240.20680", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.7070", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.5936", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.17763.5936", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19044.0", "lessThan": "10.0.19044.4529", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19045.0", "lessThan": "10.0.19045.4529", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.22000.0", "lessThan": "10.0.22000.3019", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.22621.0", "lessThan": "10.0.22621.3737", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 23H2", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.3737", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.3737", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.7070", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.7070", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.5936", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.5936", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.2527", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.25398.0", "lessThan": "10.0.25398.950", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-30088", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "fetchedAt": "2026-10-24T05:07:51.899Z", "publishedAt": "2024-06-11T16:59:56.041Z", "modifiedAt": "2026-08-10T15:12:17.405Z", "state": "published", "provider": "microsoft", "title": "Windows Kernel Elevation of Privilege Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Windows Kernel Elevation of Privilege Vulnerability", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "sourcePath": "/containers/cna/affected/0", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.10240.0", "lessThan": "10.0.10240.20680", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "sourcePath": "/containers/cna/affected/1", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.7070", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/2", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.5936", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/3", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.0", "lessThan": "10.0.17763.5936", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "sourcePath": "/containers/cna/affected/4", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.19044.0", "lessThan": "10.0.19044.4529", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "sourcePath": "/containers/cna/affected/5", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.19045.0", "lessThan": "10.0.19045.4529", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "sourcePath": "/containers/cna/affected/6", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "10.0.22000.0", "lessThan": "10.0.22000.3019", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "sourcePath": "/containers/cna/affected/7", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "10.0.22621.0", "lessThan": "10.0.22621.3737", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 23H2", "sourcePath": "/containers/cna/affected/8", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.3737", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "sourcePath": "/containers/cna/affected/9", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.3737", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "sourcePath": "/containers/cna/affected/10", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.7070", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "sourcePath": "/containers/cna/affected/11", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.7070", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "sourcePath": "/containers/cna/affected/12", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.5936", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "sourcePath": "/containers/cna/affected/13", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.5936", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/14", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.2527", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "sourcePath": "/containers/cna/affected/15", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/15/versions/0", "version": "10.0.25398.0", "lessThan": "10.0.25398.950", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-367", "lang": "en-US", "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "baseScore": 7, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30088", "label": "Windows Kernel Elevation of Privilege Vulnerability", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-30088", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.20680\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7070\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5936\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.5936\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19044.0\",\"lessThan\":\"10.0.19044.4529\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.4529\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22000.0\",\"lessThan\":\"10.0.22000.3019\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.3737\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 23H2\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3737\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3737\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7070\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7070\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5936\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5936\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2527\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/affected/15", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.950\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Windows Kernel Elevation of Privilege Vulnerability", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-367\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7,\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-30088:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088", "sourcePath": "retained:/originalText", "text": "Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-30088:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088", "modifiedAt": "2024-10-15T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-10T15:12:17.405Z", "fetchedAt": "2026-10-24T05:07:51.899Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-15T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows Server 2に権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:07:51.899Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "b7daf934f88fe71148ec67718853fca0e8850961ee9a62e7420e090390a9d8e6", "sourceModifiedAt": "2026-08-10T15:12:17.405Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Windows カーネルの特権昇格脆弱性です。", "risk": "タイムチェック・タイムユース（TOCTOU）競合状態により、特権昇格が可能になる脆弱性です。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.20680未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.7070未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.5936未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、10.0.17763.5936未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19044.0以上、10.0.19044.4529未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.4529未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.22000.0以上、10.0.22000.3019未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.3737未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.3737未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.3737未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.7070未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.7070未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.5936未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.5936未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2527未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.950未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E18" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088" ], "evidenceIds": [ "E20" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E3" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088" ], "evidenceIds": [ "E19" ] }, { "text": "「CVE-2024-30088」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-30088", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30088", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-30088", "https://nvd.nist.gov/vuln/detail/CVE-2024-30088" ] }, { "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2024-30088", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30088", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-30088", "https://nvd.nist.gov/vuln/detail/CVE-2024-30088" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json" ], "evidenceIds": [ "E3" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-30088", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30088", "label": "Windows Kernel Elevation of Privilege Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-30088", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30088", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/title", "excerpt": "Windows Kernel Elevation of Privilege Vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088", "sourceField": "retained:/originalText", "excerpt": "Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.20680\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7070\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5936\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.5936\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19044.0\",\"lessThan\":\"10.0.19044.4529\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.4529\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22000.0\",\"lessThan\":\"10.0.22000.3019\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.3737\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 23H2\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3737\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3737\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7070\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7070\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5936\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5936\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2527\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30088.json", "sourceField": "/containers/cna/affected/15", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.950\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E20", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30088", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-30088\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-30088（Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 23H2 / Windows 11 Version 23H2 / Windows Server 2）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.20680未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.7070未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.5936未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、10.0.17763.5936未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19044.0以上、10.0.19044.4529未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.4529未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.22000.0以上、10.0.22000.3019未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.3737未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.3737未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.3737未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.7070未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.7070未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.5936未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.5936未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2527未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.950未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-30088", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:07:51.899Z", "lastSuccess": "2026-10-24T05:07:51.899Z", "sourceCheckedAt": "2026-10-24T05:07:51.899Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-9680", "aliases": [], "title": "Firefox / Firefox ESR / Thunderbird：脆弱性情報", "summary": "攻撃者はアニメーションタイムラインの use‑after‑free を利用して、コンテンツプロセスでコードを実行できるようになりました。この脆弱性は実際に野外で悪用された報告があります。また、影響を受けるのは Firefox バージョン 131.0.2 未満、Firefox ESR バージョン 128.3.1 未満および 115.16.1 未満、Thunderbird バージョン 131.0.1 未満、128.3.1 未満、115.16.0 未満です。", "risk": "コードがコンテンツプロセスで実行されるため、攻撃者がブラウザー上で任意の処理を行える可能性があります。", "product": "Firefox / Firefox ESR / Thunderbird", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mozilla", "cvssVector": null, "affected": [ { "product": "Firefox", "range": ">= unspecified / < 131.0.2" }, { "product": "Firefox ESR", "range": ">= unspecified / < 128.3.1" }, { "product": "Firefox ESR", "range": ">= unspecified / < 115.16.1" }, { "product": "Thunderbird", "range": ">= unspecified / < 131.0.1" }, { "product": "Thunderbird", "range": ">= unspecified / < 128.3.1" }, { "product": "Thunderbird", "range": ">= unspecified / < 115.16.0" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が提供されない場合は製品の使用を中止してください。", "「CVE-2024-9680」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "label": "CVE：mozilla" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-9680", "label": "CVE公式レコード" }, { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1923344", "label": "CVE掲載の参考情報" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039", "label": "Windows sandbox escape detected with the in-the-wild exploit" }, { "url": "https://www.mozilla.org/security/advisories/mfsa2024-51/", "label": "CVE掲載の参考情報" }, { "url": "https://www.mozilla.org/security/advisories/mfsa2024-52/", "label": "CVE掲載の参考情報" }, { "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9680", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-10-09T12:59:07.108Z", "modifiedAt": "2026-08-04T03:55:28.598Z", "fetchedAt": "2026-10-24T06:12:14.475Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "Firefox", "vendor": "Mozilla", "versions": [ { "lessThan": "131.0.2", "status": "affected", "version": "unspecified", "versionType": "custom" } ] }, { "product": "Firefox ESR", "vendor": "Mozilla", "versions": [ { "lessThan": "128.3.1", "status": "affected", "version": "unspecified", "versionType": "custom" } ] }, { "product": "Firefox ESR", "vendor": "Mozilla", "versions": [ { "lessThan": "115.16.1", "status": "affected", "version": "unspecified", "versionType": "custom" } ] }, { "product": "Thunderbird", "vendor": "Mozilla", "versions": [ { "lessThan": "131.0.1", "status": "affected", "version": "unspecified", "versionType": "custom" } ] }, { "product": "Thunderbird", "vendor": "Mozilla", "versions": [ { "lessThan": "128.3.1", "status": "affected", "version": "unspecified", "versionType": "custom" } ] }, { "product": "Thunderbird", "vendor": "Mozilla", "versions": [ { "lessThan": "115.16.0", "status": "affected", "version": "unspecified", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-9680", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "fetchedAt": "2026-10-24T06:12:14.475Z", "publishedAt": "2024-10-09T12:59:07.108Z", "modifiedAt": "2026-08-04T03:55:28.598Z", "state": "published", "provider": "mozilla", "title": "", "descriptions": [ { "lang": "en", "value": "An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Mozilla", "product": "Firefox", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "unspecified", "lessThan": "131.0.2", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Mozilla", "product": "Firefox ESR", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "unspecified", "lessThan": "128.3.1", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Mozilla", "product": "Firefox ESR", "sourcePath": "/containers/cna/affected/2", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "unspecified", "lessThan": "115.16.1", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Mozilla", "product": "Thunderbird", "sourcePath": "/containers/cna/affected/3", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "unspecified", "lessThan": "131.0.1", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Mozilla", "product": "Thunderbird", "sourcePath": "/containers/cna/affected/4", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "unspecified", "lessThan": "128.3.1", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Mozilla", "product": "Thunderbird", "sourcePath": "/containers/cna/affected/5", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "unspecified", "lessThan": "115.16.0", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Use-after-free in Animation timeline", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1923344", "label": "mozilla", "tags": [], "provider": "mozilla", "sourcePath": "/containers/cna/references/0" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039", "label": "Windows sandbox escape detected with the in-the-wild exploit", "tags": [], "provider": "mozilla", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.mozilla.org/security/advisories/mfsa2024-51/", "label": "mozilla", "tags": [], "provider": "mozilla", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.mozilla.org/security/advisories/mfsa2024-52/", "label": "mozilla", "tags": [], "provider": "mozilla", "sourcePath": "/containers/cna/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9680", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=281992", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00005.html", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00006.html", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"Firefox\",\"vendor\":\"Mozilla\",\"versions\":[{\"lessThan\":\"131.0.2\",\"status\":\"affected\",\"version\":\"unspecified\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"product\":\"Firefox ESR\",\"vendor\":\"Mozilla\",\"versions\":[{\"lessThan\":\"128.3.1\",\"status\":\"affected\",\"version\":\"unspecified\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"product\":\"Firefox ESR\",\"vendor\":\"Mozilla\",\"versions\":[{\"lessThan\":\"115.16.1\",\"status\":\"affected\",\"version\":\"unspecified\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"product\":\"Thunderbird\",\"vendor\":\"Mozilla\",\"versions\":[{\"lessThan\":\"131.0.1\",\"status\":\"affected\",\"version\":\"unspecified\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"product\":\"Thunderbird\",\"vendor\":\"Mozilla\",\"versions\":[{\"lessThan\":\"128.3.1\",\"status\":\"affected\",\"version\":\"unspecified\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"product\":\"Thunderbird\",\"vendor\":\"Mozilla\",\"versions\":[{\"lessThan\":\"115.16.0\",\"status\":\"affected\",\"version\":\"unspecified\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"Use-after-free in Animation timeline\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":9.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-9680:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680", "sourcePath": "retained:/originalText", "text": "Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-9680:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680", "modifiedAt": "2024-10-15T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-04T03:55:28.598Z", "fetchedAt": "2026-10-24T06:12:14.475Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-15T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Firefox / Firefox ESR / Thunderbirdに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T06:12:14.475Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "da2626548c4211cb0d3e23b8a07efe7e840c8484b62c6db100e5bc733605da30", "sourceModifiedAt": "2026-08-04T03:55:28.598Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "攻撃者はアニメーションタイムラインの use‑after‑free を利用して、コンテンツプロセスでコードを実行できるようになりました。この脆弱性は実際に野外で悪用された報告があります。また、影響を受けるのは Firefox バージョン 131.0.2 未満、Firefox ESR バージョン 128.3.1 未満および 115.16.1 未満、Thunderbird バージョン 131.0.1 未満、128.3.1 未満、115.16.0 未満です。", "risk": "コードがコンテンツプロセスで実行されるため、攻撃者がブラウザー上で任意の処理を行える可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "公式の対象表：Mozilla / Firefox。影響ありとして記載：131.0.2未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Mozilla / Firefox ESR。影響ありとして記載：128.3.1未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Mozilla / Firefox ESR。影響ありとして記載：115.16.1未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Mozilla / Thunderbird。影響ありとして記載：131.0.1未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Mozilla / Thunderbird。影響ありとして記載：128.3.1未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Mozilla / Thunderbird。影響ありとして記載：115.16.0未満（原資料では開始版が未指定）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json" ], "evidenceIds": [ "E7" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680" ], "evidenceIds": [ "E9" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Firefox / Firefox ESR / Thunderbird」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-9680", "https://bugzilla.mozilla.org/show_bug.cgi?id=1923344", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039", "https://www.mozilla.org/security/advisories/mfsa2024-51/", "https://www.mozilla.org/security/advisories/mfsa2024-52/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680", "https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/", "https://nvd.nist.gov/vuln/detail/CVE-2024-9680" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が提供されない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680" ], "evidenceIds": [ "E8" ] }, { "text": "「CVE-2024-9680」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-9680", "https://bugzilla.mozilla.org/show_bug.cgi?id=1923344", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039", "https://www.mozilla.org/security/advisories/mfsa2024-51/", "https://www.mozilla.org/security/advisories/mfsa2024-52/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680", "https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/", "https://nvd.nist.gov/vuln/detail/CVE-2024-9680" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-9680", "https://bugzilla.mozilla.org/show_bug.cgi?id=1923344", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039", "https://www.mozilla.org/security/advisories/mfsa2024-51/", "https://www.mozilla.org/security/advisories/mfsa2024-52/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680", "https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/", "https://nvd.nist.gov/vuln/detail/CVE-2024-9680" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-9680", "https://bugzilla.mozilla.org/show_bug.cgi?id=1923344", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039", "https://www.mozilla.org/security/advisories/mfsa2024-51/", "https://www.mozilla.org/security/advisories/mfsa2024-52/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680", "https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/", "https://nvd.nist.gov/vuln/detail/CVE-2024-9680" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-9680", "https://bugzilla.mozilla.org/show_bug.cgi?id=1923344", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039", "https://www.mozilla.org/security/advisories/mfsa2024-51/", "https://www.mozilla.org/security/advisories/mfsa2024-52/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680", "https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/", "https://nvd.nist.gov/vuln/detail/CVE-2024-9680" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "label": "CVE：mozilla" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-9680", "label": "CVE公式レコード" }, { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1923344", "label": "CVE掲載の参考情報" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039", "label": "Windows sandbox escape detected with the in-the-wild exploit" }, { "url": "https://www.mozilla.org/security/advisories/mfsa2024-51/", "label": "CVE掲載の参考情報" }, { "url": "https://www.mozilla.org/security/advisories/mfsa2024-52/", "label": "CVE掲載の参考情報" }, { "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9680", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"Firefox\",\"vendor\":\"Mozilla\",\"versions\":[{\"lessThan\":\"131.0.2\",\"status\":\"affected\",\"version\":\"unspecified\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"product\":\"Firefox ESR\",\"vendor\":\"Mozilla\",\"versions\":[{\"lessThan\":\"128.3.1\",\"status\":\"affected\",\"version\":\"unspecified\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"product\":\"Firefox ESR\",\"vendor\":\"Mozilla\",\"versions\":[{\"lessThan\":\"115.16.1\",\"status\":\"affected\",\"version\":\"unspecified\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"product\":\"Thunderbird\",\"vendor\":\"Mozilla\",\"versions\":[{\"lessThan\":\"131.0.1\",\"status\":\"affected\",\"version\":\"unspecified\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"product\":\"Thunderbird\",\"vendor\":\"Mozilla\",\"versions\":[{\"lessThan\":\"128.3.1\",\"status\":\"affected\",\"version\":\"unspecified\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9680.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"product\":\"Thunderbird\",\"vendor\":\"Mozilla\",\"versions\":[{\"lessThan\":\"115.16.0\",\"status\":\"affected\",\"version\":\"unspecified\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E9", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9680", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-9680\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-9680（Firefox / Firefox ESR / Thunderbird）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Mozilla / Firefox。影響ありとして記載：131.0.2未満（原資料では開始版が未指定）。\n・公式の対象表：Mozilla / Firefox ESR。影響ありとして記載：128.3.1未満（原資料では開始版が未指定）。\n・公式の対象表：Mozilla / Firefox ESR。影響ありとして記載：115.16.1未満（原資料では開始版が未指定）。\n・公式の対象表：Mozilla / Thunderbird。影響ありとして記載：131.0.1未満（原資料では開始版が未指定）。\n・公式の対象表：Mozilla / Thunderbird。影響ありとして記載：128.3.1未満（原資料では開始版が未指定）。\n・公式の対象表：Mozilla / Thunderbird。影響ありとして記載：115.16.0未満（原資料では開始版が未指定）。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-9680", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T06:12:14.475Z", "lastSuccess": "2026-10-24T06:12:14.475Z", "sourceCheckedAt": "2026-10-24T06:12:14.475Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-23113", "aliases": [], "title": "FortiSwitchManager / FortiOS / FortiPAM / FortiProxy：脆弱性情報", "summary": "対象版の公式記載に相違があるため、以下の説明だけで対象外・修正済みと判断しないでください。Fortinet の FortiOS（7.4.0〜7.4.2、7.2.0〜7.2.6、7.0.0〜7.0.13）、FortiProxy（7.4.0〜7.4.2、7.2.0〜7.2.8、7.0.0〜7.0.14）、FortiPAM（1.2.0、1.1.0〜1.1.2、1.0.0〜1.0.3）、FortiSwitchManager（7.2.0〜7.2.3、7.0.0〜7.0.3）において、外部から制御可能なフォーマット文字列が使用されており、攻撃者は特別に細工したパケットを送ることで、許可されていないコードやコマンドを実行できる。", "risk": "攻撃者がコードやコマンドを実行できるため、システムが不正に操作される可能性がある。", "product": "FortiSwitchManager / FortiOS / FortiPAM / FortiProxy", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "fortinet", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C", "affected": [ { "product": "FortiSwitchManager", "range": ">= 7.2.0 / <= 7.2.3" }, { "product": "FortiSwitchManager", "range": ">= 7.0.0 / <= 7.0.3" }, { "product": "FortiOS", "range": ">= 7.4.0 / <= 7.4.2" }, { "product": "FortiOS", "range": ">= 7.2.0 / <= 7.2.6" }, { "product": "FortiOS", "range": ">= 7.0.0 / <= 7.0.13" }, { "product": "FortiPAM", "range": "1.2.0" }, { "product": "FortiPAM", "range": ">= 1.1.0 / <= 1.1.2" }, { "product": "FortiPAM", "range": ">= 1.0.0 / <= 1.0.3" }, { "product": "FortiProxy", "range": ">= 7.4.0 / <= 7.4.2" }, { "product": "FortiProxy", "range": ">= 7.2.0 / <= 7.2.8" }, { "product": "FortiProxy", "range": ">= 7.0.0 / <= 7.0.15" } ], "fixed": [], "steps": [ "FortiWeb をバージョン 7.4.3 以上にアップグレードする。", "FortiVoice をバージョン 7.0.2 以上、または 6.4.9 以上にアップグレードする。", "FortiSwitchManager をバージョン 7.2.4 以上、または 7.0.4 以上にアップグレードする。", "FortiOS をバージョン 7.4.3 以上、または 7.2.7 以上、または 7.0.14 以上にアップグレードする。", "FortiAuthenticator をバージョン 7.0.0 以上にアップグレードする。", "FortiPAM をバージョン 1.2.1 以上、または 1.1.3 以上にアップグレードする。", "FortiProxy をバージョン 7.4.3 以上、または 7.2.9 以上、または 7.0.16 以上にアップグレードする。", "「CVE-2024-23113」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "label": "CVE：fortinet" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-23113", "label": "CVE公式レコード" }, { "url": "https://fortiguard.com/psirt/FG-IR-24-029", "label": "https://fortiguard.com/psirt/FG-IR-24-029" }, { "url": "https://www.fortiguard.com/psirt/FG-IR-24-029", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23113", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-02-15T13:59:25.313Z", "modifiedAt": "2025-10-21T23:05:24.308Z", "fetchedAt": "2026-10-24T05:07:52.753Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Fortinet", "product": "FortiSwitchManager", "defaultStatus": "unaffected", "versions": [ { "versionType": "semver", "version": "7.2.0", "lessThanOrEqual": "7.2.3", "status": "affected" }, { "versionType": "semver", "version": "7.0.0", "lessThanOrEqual": "7.0.3", "status": "affected" } ] }, { "vendor": "Fortinet", "product": "FortiOS", "defaultStatus": "unaffected", "versions": [ { "versionType": "semver", "version": "7.4.0", "lessThanOrEqual": "7.4.2", "status": "affected" }, { "versionType": "semver", "version": "7.2.0", "lessThanOrEqual": "7.2.6", "status": "affected" }, { "versionType": "semver", "version": "7.0.0", "lessThanOrEqual": "7.0.13", "status": "affected" } ] }, { "vendor": "Fortinet", "product": "FortiPAM", "defaultStatus": "unaffected", "versions": [ { "version": "1.2.0", "status": "affected" }, { "versionType": "semver", "version": "1.1.0", "lessThanOrEqual": "1.1.2", "status": "affected" }, { "versionType": "semver", "version": "1.0.0", "lessThanOrEqual": "1.0.3", "status": "affected" } ] }, { "vendor": "Fortinet", "product": "FortiProxy", "defaultStatus": "unaffected", "versions": [ { "versionType": "semver", "version": "7.4.0", "lessThanOrEqual": "7.4.2", "status": "affected" }, { "versionType": "semver", "version": "7.2.0", "lessThanOrEqual": "7.2.8", "status": "affected" }, { "versionType": "semver", "version": "7.0.0", "lessThanOrEqual": "7.0.15", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-23113", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "fetchedAt": "2026-10-24T05:07:52.753Z", "publishedAt": "2024-02-15T13:59:25.313Z", "modifiedAt": "2025-10-21T23:05:24.308Z", "state": "published", "provider": "fortinet", "title": "", "descriptions": [ { "lang": "en", "value": "A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Fortinet", "product": "FortiSwitchManager", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "7.2.0", "lessThanOrEqual": "7.2.3", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "7.0.0", "lessThanOrEqual": "7.0.3", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Fortinet", "product": "FortiOS", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "7.4.0", "lessThanOrEqual": "7.4.2", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "7.2.0", "lessThanOrEqual": "7.2.6", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "7.0.0", "lessThanOrEqual": "7.0.13", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Fortinet", "product": "FortiPAM", "sourcePath": "/containers/cna/affected/2", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "1.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/1", "version": "1.1.0", "lessThanOrEqual": "1.1.2", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/2", "version": "1.0.0", "lessThanOrEqual": "1.0.3", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Fortinet", "product": "FortiProxy", "sourcePath": "/containers/cna/affected/3", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "7.4.0", "lessThanOrEqual": "7.4.2", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/3/versions/1", "version": "7.2.0", "lessThanOrEqual": "7.2.8", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/3/versions/2", "version": "7.0.0", "lessThanOrEqual": "7.0.15", "versionType": "semver", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Please upgrade to FortiWeb version 7.4.3 or above \nPlease upgrade to FortiVoice version 7.0.2 or above \nPlease upgrade to FortiVoice version 6.4.9 or above \nPlease upgrade to FortiSwitchManager version 7.2.4 or above \nPlease upgrade to FortiSwitchManager version 7.0.4 or above \nPlease upgrade to FortiOS version 7.4.3 or above \nPlease upgrade to FortiOS version 7.2.7 or above \nPlease upgrade to FortiOS version 7.0.14 or above \nPlease upgrade to FortiAuthenticator version 7.0.0 or above \nPlease upgrade to FortiPAM version 1.2.1 or above \nPlease upgrade to FortiPAM version 1.1.3 or above \nPlease upgrade to FortiProxy version 7.4.3 or above \nPlease upgrade to FortiProxy version 7.2.9 or above \nPlease upgrade to FortiProxy version 7.0.16 or above", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-134", "lang": "en", "description": "Execute unauthorized code or commands", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "fortinet", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://fortiguard.com/psirt/FG-IR-24-029", "label": "https://fortiguard.com/psirt/FG-IR-24-029", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23113", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Fortinet\",\"product\":\"FortiSwitchManager\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"versionType\":\"semver\",\"version\":\"7.2.0\",\"lessThanOrEqual\":\"7.2.3\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.3\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Fortinet\",\"product\":\"FortiOS\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"versionType\":\"semver\",\"version\":\"7.4.0\",\"lessThanOrEqual\":\"7.4.2\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.2.0\",\"lessThanOrEqual\":\"7.2.6\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.13\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Fortinet\",\"product\":\"FortiPAM\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"1.2.0\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"1.1.0\",\"lessThanOrEqual\":\"1.1.2\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"1.0.0\",\"lessThanOrEqual\":\"1.0.3\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Fortinet\",\"product\":\"FortiProxy\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"versionType\":\"semver\",\"version\":\"7.4.0\",\"lessThanOrEqual\":\"7.4.2\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.2.0\",\"lessThanOrEqual\":\"7.2.8\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.15\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Please upgrade to FortiWeb version 7.4.3 or above \nPlease upgrade to FortiVoice version 7.0.2 or above \nPlease upgrade to FortiVoice version 6.4.9 or above \nPlease upgrade to FortiSwitchManager version 7.2.4 or above \nPlease upgrade to FortiSwitchManager version 7.0.4 or above \nPlease upgrade to FortiOS version 7.4.3 or above \nPlease upgrade to FortiOS version 7.2.7 or above \nPlease upgrade to FortiOS version 7.0.14 or above \nPlease upgrade to FortiAuthenticator version 7.0.0 or above \nPlease upgrade to FortiPAM version 1.2.1 or above \nPlease upgrade to FortiPAM version 1.1.3 or above \nPlease upgrade to FortiProxy version 7.4.3 or above \nPlease upgrade to FortiProxy version 7.2.9 or above \nPlease upgrade to FortiProxy version 7.0.16 or above", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-134\",\"description\":\"Execute unauthorized code or commands\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-23113:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113", "sourcePath": "retained:/originalText", "text": "Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-23113:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113", "modifiedAt": "2024-10-09T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:24.308Z", "fetchedAt": "2026-10-24T05:07:52.753Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-09T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "FortiSwitchManager / FortiOS / FortiPAM / FortiProxyに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:07:52.753Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "539bb5c183e9d3a8196c0c8d4c9fd73cc953305928eebbcfa76af589a45a6dbf", "sourceModifiedAt": "2025-10-21T23:05:24.308Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "対象版の公式記載に相違があるため、以下の説明だけで対象外・修正済みと判断しないでください。Fortinet の FortiOS（7.4.0〜7.4.2、7.2.0〜7.2.6、7.0.0〜7.0.13）、FortiProxy（7.4.0〜7.4.2、7.2.0〜7.2.8、7.0.0〜7.0.14）、FortiPAM（1.2.0、1.1.0〜1.1.2、1.0.0〜1.0.3）、FortiSwitchManager（7.2.0〜7.2.3、7.0.0〜7.0.3）において、外部から制御可能なフォーマット文字列が使用されており、攻撃者は特別に細工したパケットを送ることで、許可されていないコードやコマンドを実行できる。", "risk": "攻撃者がコードやコマンドを実行できるため、システムが不正に操作される可能性がある。", "summaryEvidenceIds": [ "E1", "E6" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象版の公式記載に相違があります。FortiProxyについて、説明文は「7.0.0から7.0.14」、対象表は「7.0.0以上、7.0.15以下」です。説明文と対象表のどちらか一方だけで対象外や修正済みと判断せず、利用中の版を添えて提供元に確認してください。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json" ], "evidenceIds": [ "E1", "E6" ] }, { "text": "リモートの認証されていない攻撃者が、特別に細工したパケット（リクエスト）を送信できる環境で、上記の FortiOS、FortiProxy、FortiPAM、FortiSwitchManager の該当バージョンが使用されている場合に脆弱性が成立する。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Fortinet / FortiSwitchManager。影響ありとして記載：7.2.0以上、7.2.3以下。影響ありとして記載：7.0.0以上、7.0.3以下。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Fortinet / FortiOS。影響ありとして記載：7.4.0以上、7.4.2以下。影響ありとして記載：7.2.0以上、7.2.6以下。影響ありとして記載：7.0.0以上、7.0.13以下。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Fortinet / FortiPAM。影響ありとして記載：1.2.0。影響ありとして記載：1.1.0以上、1.1.2以下。影響ありとして記載：1.0.0以上、1.0.3以下。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Fortinet / FortiProxy。影響ありとして記載：7.4.0以上、7.4.2以下。影響ありとして記載：7.2.0以上、7.2.8以下。影響ありとして記載：7.0.0以上、7.0.15以下。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json" ], "evidenceIds": [ "E6" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113" ], "evidenceIds": [ "E9" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json" ], "evidenceIds": [ "E3" ] }, { "text": "「FortiSwitchManager / FortiOS / FortiPAM / FortiProxy」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-23113", "https://fortiguard.com/psirt/FG-IR-24-029", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113", "https://www.fortiguard.com/psirt/FG-IR-24-029", "https://nvd.nist.gov/vuln/detail/CVE-2024-23113" ] } ], "actions": [ { "text": "FortiWeb をバージョン 7.4.3 以上にアップグレードする。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json" ], "evidenceIds": [ "E7" ] }, { "text": "FortiVoice をバージョン 7.0.2 以上、または 6.4.9 以上にアップグレードする。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json" ], "evidenceIds": [ "E7" ] }, { "text": "FortiSwitchManager をバージョン 7.2.4 以上、または 7.0.4 以上にアップグレードする。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json" ], "evidenceIds": [ "E7" ] }, { "text": "FortiOS をバージョン 7.4.3 以上、または 7.2.7 以上、または 7.0.14 以上にアップグレードする。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json" ], "evidenceIds": [ "E7" ] }, { "text": "FortiAuthenticator をバージョン 7.0.0 以上にアップグレードする。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json" ], "evidenceIds": [ "E7" ] }, { "text": "FortiPAM をバージョン 1.2.1 以上、または 1.1.3 以上にアップグレードする。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json" ], "evidenceIds": [ "E7" ] }, { "text": "FortiProxy をバージョン 7.4.3 以上、または 7.2.9 以上、または 7.0.16 以上にアップグレードする。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json" ], "evidenceIds": [ "E7" ] }, { "text": "「CVE-2024-23113」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-23113", "https://fortiguard.com/psirt/FG-IR-24-029", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113", "https://www.fortiguard.com/psirt/FG-IR-24-029", "https://nvd.nist.gov/vuln/detail/CVE-2024-23113" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-23113", "https://fortiguard.com/psirt/FG-IR-24-029", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113", "https://www.fortiguard.com/psirt/FG-IR-24-029", "https://nvd.nist.gov/vuln/detail/CVE-2024-23113" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113" ], "evidenceIds": [ "E8" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-23113", "https://fortiguard.com/psirt/FG-IR-24-029", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113", "https://www.fortiguard.com/psirt/FG-IR-24-029", "https://nvd.nist.gov/vuln/detail/CVE-2024-23113" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "対象版の公式記載に相違があります。FortiProxyについて、説明文は「7.0.0から7.0.14」、対象表は「7.0.0以上、7.0.15以下」です。説明文と対象表のどちらか一方だけで対象外や修正済みと判断せず、利用中の版を添えて提供元に確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "label": "CVE：fortinet" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-23113", "label": "CVE公式レコード" }, { "url": "https://fortiguard.com/psirt/FG-IR-24-029", "label": "https://fortiguard.com/psirt/FG-IR-24-029" }, { "url": "https://www.fortiguard.com/psirt/FG-IR-24-029", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23113", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113", "sourceField": "retained:/originalText", "excerpt": "Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Fortinet\",\"product\":\"FortiSwitchManager\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"versionType\":\"semver\",\"version\":\"7.2.0\",\"lessThanOrEqual\":\"7.2.3\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.3\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Fortinet\",\"product\":\"FortiOS\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"versionType\":\"semver\",\"version\":\"7.4.0\",\"lessThanOrEqual\":\"7.4.2\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.2.0\",\"lessThanOrEqual\":\"7.2.6\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.13\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Fortinet\",\"product\":\"FortiPAM\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"1.2.0\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"1.1.0\",\"lessThanOrEqual\":\"1.1.2\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"1.0.0\",\"lessThanOrEqual\":\"1.0.3\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Fortinet\",\"product\":\"FortiProxy\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"versionType\":\"semver\",\"version\":\"7.4.0\",\"lessThanOrEqual\":\"7.4.2\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.2.0\",\"lessThanOrEqual\":\"7.2.8\",\"status\":\"affected\"},{\"versionType\":\"semver\",\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.15\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23113.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Please upgrade to FortiWeb version 7.4.3 or above \nPlease upgrade to FortiVoice version 7.0.2 or above \nPlease upgrade to FortiVoice version 6.4.9 or above \nPlease upgrade to FortiSwitchManager version 7.2.4 or above \nPlease upgrade to FortiSwitchManager version 7.0.4 or above \nPlease upgrade to FortiOS version 7.4.3 or above \nPlease upgrade to FortiOS version 7.2.7 or above \nPlease upgrade to FortiOS version 7.0.14 or above \nPlease upgrade to FortiAuthenticator version 7.0.0 or above \nPlease upgrade to FortiPAM version 1.2.1 or above \nPlease upgrade to FortiPAM version 1.1.3 or above \nPlease upgrade to FortiProxy version 7.4.3 or above \nPlease upgrade to FortiProxy version 7.2.9 or above \nPlease upgrade to FortiProxy version 7.0.16 or above", "language": "en", "representation": "source_excerpt" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E9", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23113", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-23113\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-23113（FortiSwitchManager / FortiOS / FortiPAM / FortiProxy）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・リモートの認証されていない攻撃者が、特別に細工したパケット（リクエスト）を送信できる環境で、上記の FortiOS、FortiProxy、FortiPAM、FortiSwitchManager の該当バージョンが使用されている場合に脆弱性が成立する。\n・公式の対象表：Fortinet / FortiSwitchManager。影響ありとして記載：7.2.0以上、7.2.3以下。影響ありとして記載：7.0.0以上、7.0.3以下。\n・公式の対象表：Fortinet / FortiOS。影響ありとして記載：7.4.0以上、7.4.2以下。影響ありとして記載：7.2.0以上、7.2.6以下。影響ありとして記載：7.0.0以上、7.0.13以下。\n・公式の対象表：Fortinet / FortiPAM。影響ありとして記載：1.2.0。影響ありとして記載：1.1.0以上、1.1.2以下。影響ありとして記載：1.0.0以上、1.0.3以下。\n・公式の対象表：Fortinet / FortiProxy。影響ありとして記載：7.4.0以上、7.4.2以下。影響ありとして記載：7.2.0以上、7.2.8以下。影響ありとして記載：7.0.0以上、7.0.15以下。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-23113\n\n公式資料で追加確認が必要な点：\n・対象版の公式記載に相違があります。FortiProxyについて、説明文は「7.0.0から7.0.14」、対象表は「7.0.0以上、7.0.15以下」です。説明文と対象表のどちらか一方だけで対象外や修正済みと判断せず、利用中の版を添えて提供元に確認してください。", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [ { "code": "affected_range_conflict", "text": "対象版の公式記載に相違があります。FortiProxyについて、説明文は「7.0.0から7.0.14」、対象表は「7.0.0以上、7.0.15以下」です。説明文と対象表のどちらか一方だけで対象外や修正済みと判断せず、利用中の版を添えて提供元に確認してください。", "evidenceIds": [ "E1", "E6" ] } ], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:07:52.753Z", "lastSuccess": "2026-10-24T05:07:52.753Z", "sourceCheckedAt": "2026-10-24T05:07:52.753Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-9379", "aliases": [], "title": "CSA (Cloud Services Appliance)：データベースへの不正操作", "summary": "Ivanti CSA の管理者用ウェブコンソールにおける SQL インジェクションにより、バージョン 5.0.2 未満の製品では、リモートで認証済みかつ管理者権限を持つ攻撃者が任意の SQL 文を実行できる。", "risk": "攻撃者は任意の SQL 文を実行できるため、データベースの内容を閲覧・改ざん・削除できる可能性がある。", "product": "CSA (Cloud Services Appliance)", "category": "other", "component": "package", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "ivanti", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "affected": [ { "product": "CSA (Cloud Services Appliance)", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "Ivanti CSA 4.6.x はサポート終了となっているため、サービスから除去するか、5.0.x 系列以降にアップグレードすることが推奨される。", "「CVE-2024-9379」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9379.json", "label": "CVE：ivanti" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-9379", "label": "CVE公式レコード" }, { "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9379", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-10-08T16:23:13.310Z", "modifiedAt": "2026-10-01T18:15:25.237Z", "fetchedAt": "2026-10-24T06:12:23.709Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "product": "CSA (Cloud Services Appliance)", "vendor": "Ivanti", "versions": [ { "status": "unaffected", "version": "5.0.2", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-9379", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9379.json", "fetchedAt": "2026-10-24T06:12:23.709Z", "publishedAt": "2024-10-08T16:23:13.310Z", "modifiedAt": "2026-10-01T18:15:25.237Z", "state": "published", "provider": "ivanti", "title": "", "descriptions": [ { "lang": "en", "value": "SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Ivanti", "product": "CSA (Cloud Services Appliance)", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "5.0.2", "versionType": "custom", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-89", "lang": "en", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "provider": "ivanti", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "label": "ivanti", "tags": [], "provider": "ivanti", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9379", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9379.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"product\":\"CSA (Cloud Services Appliance)\",\"vendor\":\"Ivanti\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"5.0.2\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9379.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9379.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-89\",\"description\":\"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9379.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-9379:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379", "sourcePath": "retained:/originalText", "text": "Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-9379:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379", "sourcePath": "retained:/sourceAction", "text": "As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379", "modifiedAt": "2024-10-09T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-01T18:15:25.237Z", "fetchedAt": "2026-10-24T06:12:23.709Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-09T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.", "sourceSummary": "CSA (Cloud Services Appliance)にデータベースへの不正操作に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "データベースに不正な命令を送られ、情報の閲覧や変更につながる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T06:12:23.709Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "6075d27da8d526f26fa445b961a1a2762a7712955a1af9a319567de993846079", "sourceModifiedAt": "2026-10-01T18:15:25.237Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Ivanti CSA の管理者用ウェブコンソールにおける SQL インジェクションにより、バージョン 5.0.2 未満の製品では、リモートで認証済みかつ管理者権限を持つ攻撃者が任意の SQL 文を実行できる。", "risk": "攻撃者は任意の SQL 文を実行できるため、データベースの内容を閲覧・改ざん・削除できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "対象は Ivanti CSA の管理者用ウェブコンソールを使用し、バージョン 5.0.2 未満が稼働している環境で、リモートから管理者として認証された攻撃者が存在する場合。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9379.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Ivanti / CSA (Cloud Services Appliance)。影響なしとして記載：5.0.2。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9379.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9379.json" ], "evidenceIds": [ "E3" ] }, { "text": "「CSA (Cloud Services Appliance)」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-9379", "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379", "https://nvd.nist.gov/vuln/detail/CVE-2024-9379" ] } ], "actions": [ { "text": "Ivanti CSA 4.6.x はサポート終了となっているため、サービスから除去するか、5.0.x 系列以降にアップグレードすることが推奨される。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2024-9379」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-9379", "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379", "https://nvd.nist.gov/vuln/detail/CVE-2024-9379" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-9379", "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379", "https://nvd.nist.gov/vuln/detail/CVE-2024-9379" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-9379", "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379", "https://nvd.nist.gov/vuln/detail/CVE-2024-9379" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9379.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-9379", "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379", "https://nvd.nist.gov/vuln/detail/CVE-2024-9379" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9379.json", "label": "CVE：ivanti" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-9379", "label": "CVE公式レコード" }, { "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9379", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9379.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379", "sourceField": "retained:/originalText", "excerpt": "Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9379.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"product\":\"CSA (Cloud Services Appliance)\",\"vendor\":\"Ivanti\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"5.0.2\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379", "sourceField": "retained:/sourceAction", "excerpt": "As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9379", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-9379\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-9379（CSA (Cloud Services Appliance)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は Ivanti CSA の管理者用ウェブコンソールを使用し、バージョン 5.0.2 未満が稼働している環境で、リモートから管理者として認証された攻撃者が存在する場合。\n・公式の対象表：Ivanti / CSA (Cloud Services Appliance)。影響なしとして記載：5.0.2。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-9379", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T06:12:23.709Z", "lastSuccess": "2026-10-24T06:12:23.709Z", "sourceCheckedAt": "2026-10-24T06:12:23.709Z", "errorCode": null }, "glossary": [ { "term": "SQLインジェクション", "meaning": "入力した値がデータベースへの命令として扱われ、意図しない問い合わせや操作をされる問題です。読み取り・書き換えなど、可能なことは脆弱性ごとに異なります。", "sourceUrl": "https://cwe.mitre.org/data/definitions/89.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-9380", "aliases": [], "title": "CSA (Cloud Services Appliance)：コード実行", "summary": "Ivanti CSA の管理者用ウェブコンソールに OS コマンドインジェクションの脆弱性があり、バージョン 5.0.2 未満では、管理者権限を持つリモート認証済み攻撃者がリモートでコードを実行できる可能性があります。", "risk": "攻撃者がサーバー上で任意の OS コマンドを実行できるようになる恐れがあります。", "product": "CSA (Cloud Services Appliance)", "category": "other", "component": "package", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "ivanti", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "CSA (Cloud Services Appliance)", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "Ivanti CSA 4.6.x はサポート終了となっているため、CSA 4.6.x をサービスから除去するか、5.0.x 以降のサポート対象バージョンにアップグレードすることが推奨されます。", "「CVE-2024-9380」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9380.json", "label": "CVE：ivanti" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-9380", "label": "CVE公式レコード" }, { "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9380", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-10-08T16:23:49.949Z", "modifiedAt": "2025-10-21T22:55:43.528Z", "fetchedAt": "2026-10-24T05:07:57.416Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "product": "CSA (Cloud Services Appliance)", "vendor": "Ivanti", "versions": [ { "status": "unaffected", "version": "5.0.2", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-9380", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9380.json", "fetchedAt": "2026-10-24T05:07:57.416Z", "publishedAt": "2024-10-08T16:23:49.949Z", "modifiedAt": "2025-10-21T22:55:43.528Z", "state": "published", "provider": "ivanti", "title": "", "descriptions": [ { "lang": "en", "value": "An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Ivanti", "product": "CSA (Cloud Services Appliance)", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "5.0.2", "versionType": "custom", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-77", "lang": "en", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH", "provider": "ivanti", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "label": "ivanti", "tags": [], "provider": "ivanti", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9380", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9380.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"product\":\"CSA (Cloud Services Appliance)\",\"vendor\":\"Ivanti\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"5.0.2\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9380.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9380.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-77\",\"description\":\"CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9380.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.2,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-9380:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380", "sourcePath": "retained:/originalText", "text": "Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-9380:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380", "sourcePath": "retained:/sourceAction", "text": "As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380", "modifiedAt": "2024-10-09T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:43.528Z", "fetchedAt": "2026-10-24T05:07:57.416Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-09T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.", "sourceSummary": "CSA (Cloud Services Appliance)にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:07:57.416Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "9359bd3b335b0bbc5ba8174ace99389c8100fcda3962023e61cdd783432004ac", "sourceModifiedAt": "2025-10-21T22:55:43.528Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Ivanti CSA の管理者用ウェブコンソールに OS コマンドインジェクションの脆弱性があり、バージョン 5.0.2 未満では、管理者権限を持つリモート認証済み攻撃者がリモートでコードを実行できる可能性があります。", "risk": "攻撃者がサーバー上で任意の OS コマンドを実行できるようになる恐れがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "管理者権限を持つ認証済みユーザーが管理コンソールにアクセスできる環境で、Ivanti CSA のバージョンが 5.0.2 未満である場合に影響します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9380.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Ivanti / CSA (Cloud Services Appliance)。影響なしとして記載：5.0.2。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9380.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9380.json" ], "evidenceIds": [ "E3" ] }, { "text": "「CSA (Cloud Services Appliance)」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-9380", "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380", "https://nvd.nist.gov/vuln/detail/CVE-2024-9380" ] } ], "actions": [ { "text": "Ivanti CSA 4.6.x はサポート終了となっているため、CSA 4.6.x をサービスから除去するか、5.0.x 以降のサポート対象バージョンにアップグレードすることが推奨されます。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2024-9380」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-9380", "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380", "https://nvd.nist.gov/vuln/detail/CVE-2024-9380" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-9380", "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380", "https://nvd.nist.gov/vuln/detail/CVE-2024-9380" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-9380", "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380", "https://nvd.nist.gov/vuln/detail/CVE-2024-9380" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9380.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-9380", "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380", "https://nvd.nist.gov/vuln/detail/CVE-2024-9380" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9380.json", "label": "CVE：ivanti" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-9380", "label": "CVE公式レコード" }, { "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9380", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9380.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380", "sourceField": "retained:/originalText", "excerpt": "Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/9xxx/CVE-2024-9380.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"product\":\"CSA (Cloud Services Appliance)\",\"vendor\":\"Ivanti\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"5.0.2\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380", "sourceField": "retained:/sourceAction", "excerpt": "As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9380", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-9380\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-9380（CSA (Cloud Services Appliance)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・管理者権限を持つ認証済みユーザーが管理コンソールにアクセスできる環境で、Ivanti CSA のバージョンが 5.0.2 未満である場合に影響します。\n・公式の対象表：Ivanti / CSA (Cloud Services Appliance)。影響なしとして記載：5.0.2。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-9380", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:07:57.416Z", "lastSuccess": "2026-10-24T05:07:57.416Z", "sourceCheckedAt": "2026-10-24T05:07:57.416Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-43047", "aliases": [], "title": "Snapdragon：脆弱性情報", "summary": "Snapdragonを使っている方が確認する情報です。製品名と版を確認し、提供元にこの番号への対応状況を問い合わせてください。公開された対象範囲を下に日本語で示しています。", "risk": "具体的な被害の種類を、取り込んだ情報から正確に整理できていません。製品を使っている場合は、CVE番号と利用中の版を添えて、影響と修正状況を提供元に確認してください。", "product": "Snapdragon", "category": "other", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "qualcomm", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Snapdragon", "range": "FastConnect 6700（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "FastConnect 6800（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "FastConnect 6900（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "FastConnect 7800（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QAM8295P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6174A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6391（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6426（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6436（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6574AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6584AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6595（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6595AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6688AQ（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6696（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCA6698AQ（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS410（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS610（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "QCS6490（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Qualcomm Video Collaboration VC1 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Qualcomm Video Collaboration VC3 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA4150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA4155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA6145P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA6150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA6155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8145P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8195P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SA8295P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD660（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SD865 5G（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SG4150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 660 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 680 4G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 685 4G Mobile Platform (SM6225-AD)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 8 Gen 1 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 865 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 870 5G Mobile Platform (SM8250-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 888 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon Auto 5G Modem-RF（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon Auto 5G Modem-RF Gen 2（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon X55 5G Modem-RF System（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "Snapdragon XR2 5G Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SW5100（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SW5100P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "SXR2130（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9335（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9341（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9370（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9375（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9380（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCD9385（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3950（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3980（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3988（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WCN3990（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8810（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8815（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8830（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" }, { "product": "Snapdragon", "range": "WSA8835（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）" } ], "fixed": [], "steps": [ "「CVE-2024-43047」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://www.cve.org/CVERecord?id=CVE-2024-43047", "label": "CVE公式レコード" }, { "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "label": "CISA KEV（悪用確認）" }, { "url": "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43047", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-10-07T12:59:01.656Z", "modifiedAt": "2025-10-21T22:55:43.826Z", "fetchedAt": "2026-10-24T15:45:56.134Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Memory corruption while maintaining memory maps of HLOS memory.", "sourceTitle": "Use After Free in DSP Service", "summaryMethod": "公開データの対象範囲・CVSS条件を日本語化し、製品ごとの一般的な操作手順を補足しています。個別の全文翻訳・環境診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "platforms": [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Wearables" ], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [ { "status": "affected", "version": "FastConnect 6700" }, { "status": "affected", "version": "FastConnect 6800" }, { "status": "affected", "version": "FastConnect 6900" }, { "status": "affected", "version": "FastConnect 7800" }, { "status": "affected", "version": "QAM8295P" }, { "status": "affected", "version": "QCA6174A" }, { "status": "affected", "version": "QCA6391" }, { "status": "affected", "version": "QCA6426" }, { "status": "affected", "version": "QCA6436" }, { "status": "affected", "version": "QCA6574AU" }, { "status": "affected", "version": "QCA6584AU" }, { "status": "affected", "version": "QCA6595" }, { "status": "affected", "version": "QCA6595AU" }, { "status": "affected", "version": "QCA6688AQ" }, { "status": "affected", "version": "QCA6696" }, { "status": "affected", "version": "QCA6698AQ" }, { "status": "affected", "version": "QCS410" }, { "status": "affected", "version": "QCS610" }, { "status": "affected", "version": "QCS6490" }, { "status": "affected", "version": "Qualcomm Video Collaboration VC1 Platform" }, { "status": "affected", "version": "Qualcomm Video Collaboration VC3 Platform" }, { "status": "affected", "version": "SA4150P" }, { "status": "affected", "version": "SA4155P" }, { "status": "affected", "version": "SA6145P" }, { "status": "affected", "version": "SA6150P" }, { "status": "affected", "version": "SA6155P" }, { "status": "affected", "version": "SA8145P" }, { "status": "affected", "version": "SA8150P" }, { "status": "affected", "version": "SA8155P" }, { "status": "affected", "version": "SA8195P" }, { "status": "affected", "version": "SA8295P" }, { "status": "affected", "version": "SD660" }, { "status": "affected", "version": "SD865 5G" }, { "status": "affected", "version": "SG4150P" }, { "status": "affected", "version": "Snapdragon 660 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 680 4G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)" }, { "status": "affected", "version": "Snapdragon 8 Gen 1 Mobile Platform" }, { "status": "affected", "version": "Snapdragon 865 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)" }, { "status": "affected", "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)" }, { "status": "affected", "version": "Snapdragon 888 5G Mobile Platform" }, { "status": "affected", "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)" }, { "status": "affected", "version": "Snapdragon Auto 5G Modem-RF" }, { "status": "affected", "version": "Snapdragon Auto 5G Modem-RF Gen 2" }, { "status": "affected", "version": "Snapdragon X55 5G Modem-RF System" }, { "status": "affected", "version": "Snapdragon XR2 5G Platform" }, { "status": "affected", "version": "SW5100" }, { "status": "affected", "version": "SW5100P" }, { "status": "affected", "version": "SXR2130" }, { "status": "affected", "version": "WCD9335" }, { "status": "affected", "version": "WCD9341" }, { "status": "affected", "version": "WCD9370" }, { "status": "affected", "version": "WCD9375" }, { "status": "affected", "version": "WCD9380" }, { "status": "affected", "version": "WCD9385" }, { "status": "affected", "version": "WCN3950" }, { "status": "affected", "version": "WCN3980" }, { "status": "affected", "version": "WCN3988" }, { "status": "affected", "version": "WCN3990" }, { "status": "affected", "version": "WSA8810" }, { "status": "affected", "version": "WSA8815" }, { "status": "affected", "version": "WSA8830" }, { "status": "affected", "version": "WSA8835" } ] } ], "configurationNotes": "対象環境・機能: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-43047", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43047.json", "fetchedAt": "2026-10-24T15:45:56.134Z", "publishedAt": "2024-10-07T12:59:01.656Z", "modifiedAt": "2025-10-21T22:55:43.826Z", "state": "published", "provider": "qualcomm", "title": "Use After Free in DSP Service", "descriptions": [ { "lang": "en", "value": "Memory corruption while maintaining memory maps of HLOS memory.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Qualcomm, Inc.", "product": "Snapdragon", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "Snapdragon Auto", "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", "Snapdragon Wearables" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "FastConnect 6700", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "FastConnect 6800", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "FastConnect 6900", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "FastConnect 7800", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "QAM8295P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "QCA6174A", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "QCA6391", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "QCA6426", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "QCA6436", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "QCA6574AU", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "QCA6584AU", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "QCA6595", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "QCA6595AU", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "QCA6688AQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "QCA6696", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "QCA6698AQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "QCS410", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "QCS610", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "QCS6490", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "Qualcomm Video Collaboration VC1 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "Qualcomm Video Collaboration VC3 Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "SA4150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "SA4155P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "SA6145P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "SA6150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "SA6155P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "SA8145P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "SA8150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "SA8155P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "SA8195P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "SA8295P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "SD660", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "SD865 5G", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "SG4150P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "Snapdragon 660 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "Snapdragon 680 4G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "Snapdragon 8 Gen 1 Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "Snapdragon 865 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "Snapdragon 865+ 5G Mobile Platform (SM8250-AB)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "Snapdragon 870 5G Mobile Platform (SM8250-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "Snapdragon 888 5G Mobile Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "Snapdragon Auto 5G Modem-RF", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "Snapdragon Auto 5G Modem-RF Gen 2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "Snapdragon X55 5G Modem-RF System", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "Snapdragon XR2 5G Platform", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "SW5100", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "SW5100P", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "SXR2130", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "WCD9335", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "WCD9341", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "WCD9370", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "WCD9375", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "WCD9380", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "WCD9385", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "WCN3950", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "WCN3980", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "WCN3988", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "WCN3990", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "WSA8810", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "WSA8815", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "WSA8830", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "WSA8835", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-416", "lang": "en", "description": "CWE-416 Use After Free", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "qualcomm", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "label": "qualcomm", "tags": [], "provider": "qualcomm", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43047", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43047.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"platforms\":[\"Snapdragon Auto\",\"Snapdragon Compute\",\"Snapdragon Connectivity\",\"Snapdragon Consumer IOT\",\"Snapdragon Industrial IOT\",\"Snapdragon Mobile\",\"Snapdragon Wearables\"],\"product\":\"Snapdragon\",\"vendor\":\"Qualcomm, Inc.\",\"versions\":[{\"status\":\"affected\",\"version\":\"FastConnect 6700\"},{\"status\":\"affected\",\"version\":\"FastConnect 6800\"},{\"status\":\"affected\",\"version\":\"FastConnect 6900\"},{\"status\":\"affected\",\"version\":\"FastConnect 7800\"},{\"status\":\"affected\",\"version\":\"QAM8295P\"},{\"status\":\"affected\",\"version\":\"QCA6174A\"},{\"status\":\"affected\",\"version\":\"QCA6391\"},{\"status\":\"affected\",\"version\":\"QCA6426\"},{\"status\":\"affected\",\"version\":\"QCA6436\"},{\"status\":\"affected\",\"version\":\"QCA6574AU\"},{\"status\":\"affected\",\"version\":\"QCA6584AU\"},{\"status\":\"affected\",\"version\":\"QCA6595\"},{\"status\":\"affected\",\"version\":\"QCA6595AU\"},{\"status\":\"affected\",\"version\":\"QCA6688AQ\"},{\"status\":\"affected\",\"version\":\"QCA6696\"},{\"status\":\"affected\",\"version\":\"QCA6698AQ\"},{\"status\":\"affected\",\"version\":\"QCS410\"},{\"status\":\"affected\",\"version\":\"QCS610\"},{\"status\":\"affected\",\"version\":\"QCS6490\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC1 Platform\"},{\"status\":\"affected\",\"version\":\"Qualcomm Video Collaboration VC3 Platform\"},{\"status\":\"affected\",\"version\":\"SA4150P\"},{\"status\":\"affected\",\"version\":\"SA4155P\"},{\"status\":\"affected\",\"version\":\"SA6145P\"},{\"status\":\"affected\",\"version\":\"SA6150P\"},{\"status\":\"affected\",\"version\":\"SA6155P\"},{\"status\":\"affected\",\"version\":\"SA8145P\"},{\"status\":\"affected\",\"version\":\"SA8150P\"},{\"status\":\"affected\",\"version\":\"SA8155P\"},{\"status\":\"affected\",\"version\":\"SA8195P\"},{\"status\":\"affected\",\"version\":\"SA8295P\"},{\"status\":\"affected\",\"version\":\"SD660\"},{\"status\":\"affected\",\"version\":\"SD865 5G\"},{\"status\":\"affected\",\"version\":\"SG4150P\"},{\"status\":\"affected\",\"version\":\"Snapdragon 660 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 680 4G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 685 4G Mobile Platform (SM6225-AD)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 8 Gen 1 Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 865+ 5G Mobile Platform (SM8250-AB)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 870 5G Mobile Platform (SM8250-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888 5G Mobile Platform\"},{\"status\":\"affected\",\"version\":\"Snapdragon 888+ 5G Mobile Platform (SM8350-AC)\"},{\"status\":\"affected\",\"version\":\"Snapdragon Auto 5G Modem-RF\"},{\"status\":\"affected\",\"version\":\"Snapdragon Auto 5G Modem-RF Gen 2\"},{\"status\":\"affected\",\"version\":\"Snapdragon X55 5G Modem-RF System\"},{\"status\":\"affected\",\"version\":\"Snapdragon XR2 5G Platform\"},{\"status\":\"affected\",\"version\":\"SW5100\"},{\"status\":\"affected\",\"version\":\"SW5100P\"},{\"status\":\"affected\",\"version\":\"SXR2130\"},{\"status\":\"affected\",\"version\":\"WCD9335\"},{\"status\":\"affected\",\"version\":\"WCD9341\"},{\"status\":\"affected\",\"version\":\"WCD9370\"},{\"status\":\"affected\",\"version\":\"WCD9375\"},{\"status\":\"affected\",\"version\":\"WCD9380\"},{\"status\":\"affected\",\"version\":\"WCD9385\"},{\"status\":\"affected\",\"version\":\"WCN3950\"},{\"status\":\"affected\",\"version\":\"WCN3980\"},{\"status\":\"affected\",\"version\":\"WCN3988\"},{\"status\":\"affected\",\"version\":\"WCN3990\"},{\"status\":\"affected\",\"version\":\"WSA8810\"},{\"status\":\"affected\",\"version\":\"WSA8815\"},{\"status\":\"affected\",\"version\":\"WSA8830\"},{\"status\":\"affected\",\"version\":\"WSA8835\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43047.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Memory corruption while maintaining memory maps of HLOS memory.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43047.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-416\",\"description\":\"CWE-416 Use After Free\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43047.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"LOCAL\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-43047:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "sourcePath": "retained:/originalText", "text": "Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps of HLOS memory.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-43047:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "sourcePath": "retained:/sourceAction", "text": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "modifiedAt": "2024-10-08T00:00:00.000Z", "fetchedAt": "2026-10-24T15:17:49.569Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:43.826Z", "fetchedAt": "2026-10-24T15:45:56.134Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-08T00:00:00.000Z", "fetchedAt": "2026-10-24T15:17:49.569Z", "state": "published" } ], "sourceAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "sourceSummary": "Snapdragonに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "structured", "reviewedAt": null, "reviewState": "unreviewed", "summary": "Snapdragonを使っている方が確認する情報です。製品名と版を確認し、提供元にこの番号への対応状況を問い合わせてください。公開された対象範囲を下に日本語で示しています。", "risk": "具体的な被害の種類を、取り込んだ情報から正確に整理できていません。製品を使っている場合は、CVE番号と利用中の版を添えて、影響と修正状況を提供元に確認してください。", "applicability": [ { "text": "最初に「Snapdragon」を使っているか、開発元・製品名・バージョンを確認します。同じカテゴリの製品を使っているだけでは、この問題の対象とは限りません。", "kind": "check", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — FastConnect 6700（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — FastConnect 6800（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — FastConnect 6900（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — FastConnect 7800（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QAM8295P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QCA6174A（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QCA6391（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QCA6426（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QCA6436（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QCA6574AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QCA6584AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QCA6595（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QCA6595AU（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QCA6688AQ（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QCA6696（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QCA6698AQ（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QCS410（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QCS610（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — QCS6490（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — Qualcomm Video Collaboration VC1 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — Qualcomm Video Collaboration VC3 Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — SA4150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — SA4155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — SA6145P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — SA6150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — SA6155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — SA8145P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — SA8150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — SA8155P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — SA8195P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — SA8295P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — SD660（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — SD865 5G（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — SG4150P（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — Snapdragon 660 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — Snapdragon 680 4G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — Snapdragon 685 4G Mobile Platform (SM6225-AD)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — Snapdragon 8 Gen 1 Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — Snapdragon 865 5G Mobile Platform（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データの対象範囲：Snapdragon — Snapdragon 865+ 5G Mobile Platform (SM8250-AB)（環境: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables）。この範囲に加え、下に記載する権限・構成などの条件も照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公開データにある構成上の条件：対象環境・機能: Snapdragon Auto / Snapdragon Compute / Snapdragon Connectivity / Snapdragon Consumer IOT / Snapdragon Industrial IOT / Snapdragon Mobile / Snapdragon Wearables。製品バージョンだけでなく、原文の利用条件を照合してください。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "公表されたCVSS評価では、攻撃者は事前に一般利用者程度の権限を持つ必要があります。WordPressの「購読者」「投稿者」などの具体的な役割は、この値だけでは分かりません。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047", "https://www.first.org/cvss/v3.1/specification-document" ] }, { "text": "公表されたCVSS評価では、対象機器上の処理など、ローカルな攻撃経路が条件です。インターネットからリクエストを送るだけで成立する、という評価ではありません。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047", "https://www.first.org/cvss/v3.1/specification-document" ] }, { "text": "公表されたCVSS評価では、攻撃者以外の利用者がリンクを開くなどの操作をしなくても、攻撃が成立し得ます。", "kind": "fact", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047", "https://www.first.org/cvss/v3.1/specification-document" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。利用している場合は、対象かどうかの確認と修正を優先してください。あなたの環境がすでに被害を受けたことを示す情報ではありません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047" ] } ], "versionChecks": [ { "text": "「Snapdragon」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] } ], "actions": [ { "text": "「CVE-2024-43047」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] } ], "verification": [ { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-43047", "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43047" ] } ], "unknowns": [ "取り込んだ公開データには、修正済みと明記されたバージョン番号がありません。「修正されていない」と確定したわけではありません。下の問い合わせ文で、修正版の番号・提供場所・適用予定を確認できます。" ], "supportRequest": "件名：CVE-2024-43047（Snapdragon）の影響と対応状況の確認\n\n利用中のサイト・機器・サービス：[記入してください]\n製品名・開発元：[記入してください]\n現在のバージョン・ビルド番号：[不明なら「不明」と記入]\n\nCVE-2024-43047について、次を教えてください。\n1. この環境は対象ですか。対象外の場合は、版・設定・機能などの判断理由を教えてください。\n2. 対象の場合、修正を含む版・パッケージ番号と、更新方法を教えてください。古い版に修正を取り込んでいる場合は、このCVEへの対応状況を教えてください。\n3. いつ対応できますか。再起動・停止時間・事前のバックアップや確認作業は必要ですか。\n4. すぐ更新できない場合、正式な回避策とその限界・副作用を教えてください。利用を続けてよい条件も知りたいです。\n5. 対応完了後、修正を確認できる版・設定・対応日時を連絡してください。\n\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-43047", "sources": [ { "url": "https://www.cve.org/CVERecord?id=CVE-2024-43047", "label": "CVE公式レコード" }, { "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html", "label": "CVE掲載の参考情報" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43047", "label": "CISA KEV（悪用確認）" }, { "url": "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43047", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "glossary": [], "automation": { "status": "error", "lastAttempt": "2026-10-24T15:45:56.134Z", "lastSuccess": "2026-10-23T03:29:37.383Z", "sourceCheckedAt": "2026-10-24T15:45:56.134Z", "errorCode": "validation_failed" } } }, { "id": "CVE-2024-43572", "aliases": [], "title": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows 11 Versi：コード実行", "summary": "Microsoft Management Console にリモートコード実行の脆弱性があります。", "risk": "リモートからコードが実行され、システムが攻撃者に制御される可能性があります。", "product": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows 11 Versi", "category": "windows", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "affected": [ { "product": "Windows 10 Version 1507", "range": ">= 10.0.10240.0 / < 10.0.10240.20796（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1607", "range": ">= 10.0.14393.0 / < 10.0.14393.7428（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.17763.0 / < 10.0.17763.6414（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 21H2", "range": ">= 10.0.19043.0 / < 10.0.19044.5011（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 10 Version 22H2", "range": ">= 10.0.19045.0 / < 10.0.19045.5011（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 21H2", "range": ">= 10.0.22000.0 / < 10.0.22000.3260（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 22H2", "range": ">= 10.0.22621.0 / < 10.0.22621.4317（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 22H3", "range": ">= 10.0.22631.0 / < 10.0.22631.4317（環境: ARM64-based Systems）" }, { "product": "Windows 11 Version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.4317（環境: x64-based Systems）" }, { "product": "Windows 11 Version 24H2", "range": ">= 10.0.26100.0 / < 10.0.26100.2033（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows Server 2008 Service Pack 2", "range": ">= 6.0.6003.0 / < 6.0.6003.22918（環境: x64-based Systems）" }, { "product": "Windows Server 2008 R2 Service Pack 1", "range": ">= 6.1.7601.0 / < 6.1.7601.27366（環境: x64-based Systems）" }, { "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "range": ">= 6.1.7601.0 / < 6.1.7601.27366（環境: x64-based Systems）" }, { "product": "Windows Server 2008 Service Pack 2", "range": ">= 6.0.6003.0 / < 6.0.6003.22918（環境: 32-bit Systems）" }, { "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "range": ">= 6.0.6003.0 / < 6.0.6003.22918（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows Server 2012", "range": ">= 6.2.9200.0 / < 6.2.9200.25118（環境: x64-based Systems）" }, { "product": "Windows Server 2012 (Server Core installation)", "range": ">= 6.2.9200.0 / < 6.2.9200.25118（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2", "range": ">= 6.3.9600.0 / < 6.3.9600.22221（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2 (Server Core installation)", "range": ">= 6.3.9600.0 / < 6.3.9600.22221（環境: x64-based Systems）" }, { "product": "Windows Server 2016", "range": ">= 10.0.14393.0 / < 10.0.14393.7428（環境: x64-based Systems）" }, { "product": "Windows Server 2016 (Server Core installation)", "range": ">= 10.0.14393.0 / < 10.0.14393.7428（環境: x64-based Systems）" }, { "product": "Windows Server 2019", "range": ">= 10.0.17763.0 / < 10.0.17763.6414（環境: x64-based Systems）" }, { "product": "Windows Server 2019 (Server Core installation)", "range": ">= 10.0.17763.0 / < 10.0.17763.6414（環境: x64-based Systems）" }, { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.2762（環境: x64-based Systems）" }, { "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "range": ">= 10.0.25398.0 / < 10.0.25398.1189（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2024-43572」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-43572", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43572", "label": "Microsoft Management Console Remote Code Execution Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/advisory/CVE-2024-43572", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43572", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2024-10-08T17:36:10.339Z", "modifiedAt": "2026-08-19T16:27:08.850Z", "fetchedAt": "2026-10-24T07:16:19.518Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Microsoft Management Console Remote Code Execution Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.10240.0", "lessThan": "10.0.10240.20796", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.7428", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.6414", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19043.0", "lessThan": "10.0.19044.5011", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19045.0", "lessThan": "10.0.19045.5011", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.22000.0", "lessThan": "10.0.22000.3260", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.22621.0", "lessThan": "10.0.22621.4317", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.4317", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.4317", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.2033", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.0.6003.0", "lessThan": "6.0.6003.22918", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.1.7601.0", "lessThan": "6.1.7601.27366", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.1.7601.0", "lessThan": "6.1.7601.27366", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "platforms": [ "32-bit Systems" ], "versions": [ { "version": "6.0.6003.0", "lessThan": "6.0.6003.22918", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "6.0.6003.0", "lessThan": "6.0.6003.22918", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.2.9200.0", "lessThan": "6.2.9200.25118", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.2.9200.0", "lessThan": "6.2.9200.25118", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.22221", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.22221", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.7428", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.7428", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.6414", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.6414", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.2762", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.25398.0", "lessThan": "10.0.25398.1189", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-43572", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "fetchedAt": "2026-10-24T07:16:19.518Z", "publishedAt": "2024-10-08T17:36:10.339Z", "modifiedAt": "2026-08-19T16:27:08.850Z", "state": "published", "provider": "microsoft", "title": "Microsoft Management Console Remote Code Execution Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Microsoft Management Console Remote Code Execution Vulnerability", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "sourcePath": "/containers/cna/affected/0", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.10240.0", "lessThan": "10.0.10240.20796", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "sourcePath": "/containers/cna/affected/1", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.7428", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/2", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.6414", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "sourcePath": "/containers/cna/affected/3", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.19043.0", "lessThan": "10.0.19044.5011", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "sourcePath": "/containers/cna/affected/4", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.19045.0", "lessThan": "10.0.19045.5011", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "sourcePath": "/containers/cna/affected/5", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.22000.0", "lessThan": "10.0.22000.3260", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "sourcePath": "/containers/cna/affected/6", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "10.0.22621.0", "lessThan": "10.0.22621.4317", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "sourcePath": "/containers/cna/affected/7", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.4317", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "sourcePath": "/containers/cna/affected/8", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.4317", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "sourcePath": "/containers/cna/affected/9", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.2033", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "sourcePath": "/containers/cna/affected/10", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "6.0.6003.0", "lessThan": "6.0.6003.22918", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1", "sourcePath": "/containers/cna/affected/11", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "6.1.7601.0", "lessThan": "6.1.7601.27366", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "sourcePath": "/containers/cna/affected/12", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "6.1.7601.0", "lessThan": "6.1.7601.27366", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "sourcePath": "/containers/cna/affected/13", "platforms": [ "32-bit Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "6.0.6003.0", "lessThan": "6.0.6003.22918", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "sourcePath": "/containers/cna/affected/14", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "6.0.6003.0", "lessThan": "6.0.6003.22918", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012", "sourcePath": "/containers/cna/affected/15", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/15/versions/0", "version": "6.2.9200.0", "lessThan": "6.2.9200.25118", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "sourcePath": "/containers/cna/affected/16", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/16/versions/0", "version": "6.2.9200.0", "lessThan": "6.2.9200.25118", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "sourcePath": "/containers/cna/affected/17", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/17/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.22221", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "sourcePath": "/containers/cna/affected/18", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/18/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.22221", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "sourcePath": "/containers/cna/affected/19", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/19/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.7428", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "sourcePath": "/containers/cna/affected/20", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/20/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.7428", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "sourcePath": "/containers/cna/affected/21", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/21/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.6414", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "sourcePath": "/containers/cna/affected/22", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/22/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.6414", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/23", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/23/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.2762", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "sourcePath": "/containers/cna/affected/24", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/24/versions/0", "version": "10.0.25398.0", "lessThan": "10.0.25398.1189", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-707", "lang": "en-US", "description": "CWE-707: Improper Neutralization", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43572", "label": "Microsoft Management Console Remote Code Execution Vulnerability", "tags": [ "vendor-advisory", "patch" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43572", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.20796\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7428\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6414\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19044.5011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.5011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22000.0\",\"lessThan\":\"10.0.22000.3260\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.4317\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.4317\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.4317\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.2033\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22918\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.27366\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.27366\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22918\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22918\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/15", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.25118\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/16", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.25118\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/17", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22221\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/18", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22221\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/19", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7428\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/20", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7428\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/21", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6414\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/22", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6414\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/23", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/23", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2762\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/24", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/affected/24", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.1189\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Microsoft Management Console Remote Code Execution Vulnerability", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-707: Improper Neutralization\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-707\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-43572:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572", "sourcePath": "retained:/originalText", "text": "Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-43572:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572", "modifiedAt": "2024-10-08T00:00:00.000Z", "fetchedAt": "2026-10-24T06:17:49.270Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T16:27:08.850Z", "fetchedAt": "2026-10-24T07:16:19.518Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-08T00:00:00.000Z", "fetchedAt": "2026-10-24T06:17:49.270Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows 11 Versiにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T07:16:19.518Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "9ff04fce11c4fe27de238b051b4ebfea770e21cf0c1da71da3a662903933a79e", "sourceModifiedAt": "2026-08-19T16:27:08.850Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft Management Console にリモートコード実行の脆弱性があります。", "risk": "リモートからコードが実行され、システムが攻撃者に制御される可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.20796未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.7428未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.6414未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19044.5011未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.5011未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.22000.0以上、10.0.22000.3260未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.4317未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.4317未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.4317未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.2033未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22918未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.7601.0以上、6.1.7601.27366未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.1.7601.0以上、6.1.7601.27366未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22918未満。対象の環境：32-bit Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.6003.0以上、6.0.6003.22918未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、6.2.9200.25118未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E18" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、6.2.9200.25118未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E19" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.22221未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E20" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.22221未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E21" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.7428未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E22" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.7428未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E23" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.6414未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E24" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.6414未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E25" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2762未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E26" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.1189未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E27" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572" ], "evidenceIds": [ "E29" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E3" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572" ], "evidenceIds": [ "E28" ] }, { "text": "「CVE-2024-43572」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43572", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43572", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572", "https://msrc.microsoft.com/update-guide/advisory/CVE-2024-43572", "https://nvd.nist.gov/vuln/detail/CVE-2024-43572" ] }, { "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2024-43572", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43572", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572", "https://msrc.microsoft.com/update-guide/advisory/CVE-2024-43572", "https://nvd.nist.gov/vuln/detail/CVE-2024-43572" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json" ], "evidenceIds": [ "E3" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-43572", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43572", "label": "Microsoft Management Console Remote Code Execution Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/advisory/CVE-2024-43572", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43572", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/title", "excerpt": "Microsoft Management Console Remote Code Execution Vulnerability", "language": null }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572", "sourceField": "retained:/originalText", "excerpt": "Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.20796\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7428\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6414\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19044.5011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.5011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22000.0\",\"lessThan\":\"10.0.22000.3260\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.4317\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.4317\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.4317\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.2033\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22918\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.27366\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.1.7601.0\",\"lessThan\":\"6.1.7601.27366\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22918\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22918\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/15", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.25118\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/16", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.25118\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/17", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22221\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/18", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22221\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/19", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7428\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E23", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/20", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7428\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E24", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/21", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6414\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E25", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/22", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6414\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E26", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/23", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2762\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E27", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43572.json", "sourceField": "/containers/cna/affected/24", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.1189\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E28", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E29", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43572", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-43572\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-43572（Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows 11 Versi）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.20796未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.7428未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.6414未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19044.5011未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.5011未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.22000.0以上、10.0.22000.3260未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.4317未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.4317未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.4317未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.2033未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22918未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1。影響ありとして記載：6.1.7601.0以上、6.1.7601.27366未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)。影響ありとして記載：6.1.7601.0以上、6.1.7601.27366未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22918未満。対象の環境：32-bit Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.6003.0以上、6.0.6003.22918未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、6.2.9200.25118未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、6.2.9200.25118未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.22221未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.22221未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.7428未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.7428未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.6414未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.6414未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2762未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.1189未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-43572", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T07:16:19.518Z", "lastSuccess": "2026-10-24T07:16:19.518Z", "sourceCheckedAt": "2026-10-24T07:16:19.518Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-43573", "aliases": [], "title": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows 11 Versi：脆弱性情報", "summary": "Microsoft Windows の MSHTML プラットフォームに偽装（spoofing）脆弱性があり、攻撃者がこれを利用すると機密情報が漏洩する可能性があります。", "risk": "機密情報が漏洩する可能性があります。", "product": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows 11 Versi", "category": "windows", "component": "package", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C", "affected": [ { "product": "Windows 10 Version 1507", "range": ">= 10.0.10240.0 / < 10.0.10240.20796（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1607", "range": ">= 10.0.14393.0 / < 10.0.14393.7428（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.17763.0 / < 10.0.17763.6414（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 21H2", "range": ">= 10.0.19043.0 / < 10.0.19044.5011（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 10 Version 22H2", "range": ">= 10.0.19045.0 / < 10.0.19045.5011（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 21H2", "range": ">= 10.0.22000.0 / < 10.0.22000.3260（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 22H2", "range": ">= 10.0.22621.0 / < 10.0.22621.4317（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 22H3", "range": ">= 10.0.22631.0 / < 10.0.22631.4317（環境: ARM64-based Systems）" }, { "product": "Windows 11 Version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.4317（環境: x64-based Systems）" }, { "product": "Windows 11 Version 24H2", "range": ">= 10.0.26100.0 / < 10.0.26100.2033（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows Server 2012 R2", "range": ">= 6.3.9600.0 / < 6.3.9600.22221（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2 (Server Core installation)", "range": ">= 6.3.9600.0 / < 6.3.9600.22221（環境: x64-based Systems）" }, { "product": "Windows Server 2016", "range": ">= 10.0.14393.0 / < 10.0.14393.7428（環境: x64-based Systems）" }, { "product": "Windows Server 2016 (Server Core installation)", "range": ">= 10.0.14393.0 / < 10.0.14393.7428（環境: x64-based Systems）" }, { "product": "Windows Server 2019", "range": ">= 10.0.17763.0 / < 10.0.17763.6414（環境: x64-based Systems）" }, { "product": "Windows Server 2019 (Server Core installation)", "range": ">= 10.0.17763.0 / < 10.0.17763.6414（環境: x64-based Systems）" }, { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.2762（環境: x64-based Systems）" }, { "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "range": ">= 10.0.25398.0 / < 10.0.25398.1189（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2024-43573」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-43573", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43573", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43573", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2024-10-08T17:35:31.236Z", "modifiedAt": "2026-08-19T16:26:27.211Z", "fetchedAt": "2026-10-24T05:08:09.651Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Windows MSHTML Platform Spoofing Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.10240.0", "lessThan": "10.0.10240.20796", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.7428", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.6414", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19043.0", "lessThan": "10.0.19044.5011", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19045.0", "lessThan": "10.0.19045.5011", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.22000.0", "lessThan": "10.0.22000.3260", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.22621.0", "lessThan": "10.0.22621.4317", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.4317", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.4317", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.26100.0", "lessThan": "10.0.26100.2033", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.22221", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.22221", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.7428", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.7428", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.6414", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.6414", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.2762", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.25398.0", "lessThan": "10.0.25398.1189", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-43573", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "fetchedAt": "2026-10-24T05:08:09.651Z", "publishedAt": "2024-10-08T17:35:31.236Z", "modifiedAt": "2026-08-19T16:26:27.211Z", "state": "published", "provider": "microsoft", "title": "Windows MSHTML Platform Spoofing Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Windows MSHTML Platform Spoofing Vulnerability", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "sourcePath": "/containers/cna/affected/0", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.10240.0", "lessThan": "10.0.10240.20796", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "sourcePath": "/containers/cna/affected/1", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.7428", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/2", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.6414", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "sourcePath": "/containers/cna/affected/3", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.19043.0", "lessThan": "10.0.19044.5011", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "sourcePath": "/containers/cna/affected/4", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.19045.0", "lessThan": "10.0.19045.5011", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "sourcePath": "/containers/cna/affected/5", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.22000.0", "lessThan": "10.0.22000.3260", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "sourcePath": "/containers/cna/affected/6", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "10.0.22621.0", "lessThan": "10.0.22621.4317", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "sourcePath": "/containers/cna/affected/7", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.4317", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "sourcePath": "/containers/cna/affected/8", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.4317", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 24H2", "sourcePath": "/containers/cna/affected/9", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "10.0.26100.0", "lessThan": "10.0.26100.2033", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "sourcePath": "/containers/cna/affected/10", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.22221", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "sourcePath": "/containers/cna/affected/11", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.22221", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "sourcePath": "/containers/cna/affected/12", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.7428", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "sourcePath": "/containers/cna/affected/13", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.7428", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "sourcePath": "/containers/cna/affected/14", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.6414", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "sourcePath": "/containers/cna/affected/15", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/15/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.6414", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/16", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/16/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.2762", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "sourcePath": "/containers/cna/affected/17", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/17/versions/0", "version": "10.0.25398.0", "lessThan": "10.0.25398.1189", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-79", "lang": "en-US", "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C", "baseScore": 6.5, "baseSeverity": "MEDIUM", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43573", "label": "Windows MSHTML Platform Spoofing Vulnerability", "tags": [ "vendor-advisory", "patch" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43573", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.20796\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7428\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6414\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19044.5011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.5011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22000.0\",\"lessThan\":\"10.0.22000.3260\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.4317\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.4317\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.4317\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.2033\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22221\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22221\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7428\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7428\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6414\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/15", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6414\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/16", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2762\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/affected/17", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.1189\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Windows MSHTML Platform Spoofing Vulnerability", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-79\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"MEDIUM\",\"baseScore\":6.5,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-43573:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573", "sourcePath": "retained:/originalText", "text": "Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-43573:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573", "modifiedAt": "2024-10-08T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-19T16:26:27.211Z", "fetchedAt": "2026-10-24T05:08:09.651Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-08T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows 11 Versiに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:08:09.651Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "8eef256b56245b6d34159a99fde4d10989609e8a4fd1268611eeb3dcd2f9a62d", "sourceModifiedAt": "2026-08-19T16:26:27.211Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft Windows の MSHTML プラットフォームに偽装（spoofing）脆弱性があり、攻撃者がこれを利用すると機密情報が漏洩する可能性があります。", "risk": "機密情報が漏洩する可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.20796未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.7428未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.6414未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19044.5011未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.5011未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.22000.0以上、10.0.22000.3260未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.4317未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.4317未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.4317未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.2033未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.22221未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.22221未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.7428未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.7428未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.6414未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.6414未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E18" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2762未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E19" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.1189未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E20" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573" ], "evidenceIds": [ "E22" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E3" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573" ], "evidenceIds": [ "E21" ] }, { "text": "「CVE-2024-43573」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-43573", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43573", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573", "https://nvd.nist.gov/vuln/detail/CVE-2024-43573" ] }, { "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2024-43573", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43573", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573", "https://nvd.nist.gov/vuln/detail/CVE-2024-43573" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json" ], "evidenceIds": [ "E3" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-43573", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43573", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43573", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573", "sourceField": "retained:/originalText", "excerpt": "Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality.", "language": "en", "representation": "retained_feed_field" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/title", "excerpt": "Windows MSHTML Platform Spoofing Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.20796\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7428\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6414\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19044.5011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.5011\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22000.0\",\"lessThan\":\"10.0.22000.3260\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.4317\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.4317\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.4317\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 24H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.26100.0\",\"lessThan\":\"10.0.26100.2033\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22221\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22221\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7428\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7428\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6414\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/15", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6414\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/16", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2762\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/43xxx/CVE-2024-43573.json", "sourceField": "/containers/cna/affected/17", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.1189\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E21", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E22", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-43573", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-43573\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-43573（Windows 10 Version 1507 / Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows 11 Versi）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.20796未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.7428未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.6414未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19044.5011未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.5011未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.22000.0以上、10.0.22000.3260未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.4317未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.4317未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.4317未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 24H2。影響ありとして記載：10.0.26100.0以上、10.0.26100.2033未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.22221未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.22221未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.7428未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.7428未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.6414未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.6414未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2762未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.1189未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-43573", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:08:09.651Z", "lastSuccess": "2026-10-24T05:08:09.651Z", "sourceCheckedAt": "2026-10-24T05:08:09.651Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-45519", "aliases": [], "title": "n/a：脆弱性情報", "summary": "Zimbra Collaboration Suite (ZCS) の postjournal サービスは、バージョン 8.8.15 Patch 46 未満、9.0.0 Patch 41 未満、10.0.9 未満、10.1.1 未満の環境で、認証されていないユーザーがコマンドを実行できる可能性があります。", "risk": "認証されていないユーザーがサーバー上で任意のコマンドを実行できるため、システムの制御が奪われる危険があります。", "product": "Synacor Zimbra Collaboration Suite (ZCS)", "category": "other", "component": "package", "severity": "critical", "cvss": 10, "cvssVersion": "3.1", "cvssSource": "mitre", "cvssVector": "CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N", "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2024-45519」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-45519", "label": "CVE公式レコード" }, { "url": "https://wiki.zimbra.com/wiki/Security_Center", "label": "CVE掲載の参考情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy", "label": "CVE掲載の参考情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes", "label": "CVE掲載の参考情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes", "label": "CVE掲載の参考情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes", "label": "CVE掲載の参考情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes", "label": "CVE掲載の参考情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45519", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-10-02T00:00:00.000Z", "modifiedAt": "2026-02-03T19:27:04.871Z", "fetchedAt": "2026-10-24T06:12:33.756Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-45519", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json", "fetchedAt": "2026-10-24T06:12:33.756Z", "publishedAt": "2024-10-02T00:00:00.000Z", "modifiedAt": "2026-02-03T19:27:04.871Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "mitre", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wiki.zimbra.com/wiki/Security_Center", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/0" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/1" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/2" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/3" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/4" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/5" }, { "url": "https://blog.projectdiscovery.io/zimbra-remote-code-execution/", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-45519", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-45519:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519", "sourcePath": "retained:/originalText", "text": "Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-45519:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519", "modifiedAt": "2024-10-03T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-03T19:27:04.871Z", "fetchedAt": "2026-10-24T06:12:33.756Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-03T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T06:12:33.756Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e990333f19d10d0fe793961c834d388c4fdd3b217c819504d8306fee136ac4ec", "sourceModifiedAt": "2026-02-03T19:27:04.871Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Zimbra Collaboration Suite (ZCS) の postjournal サービスは、バージョン 8.8.15 Patch 46 未満、9.0.0 Patch 41 未満、10.0.9 未満、10.1.1 未満の環境で、認証されていないユーザーがコマンドを実行できる可能性があります。", "risk": "認証されていないユーザーがサーバー上で任意のコマンドを実行できるため、システムの制御が奪われる危険があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "対象は Zimbra Collaboration Suite (ZCS) の postjournal サービスです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json" ], "evidenceIds": [ "E1" ] }, { "text": "バージョン 8.8.15 Patch 46 未満の ZCS が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json" ], "evidenceIds": [ "E1" ] }, { "text": "バージョン 9.0.0 Patch 41 未満の ZCS が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json" ], "evidenceIds": [ "E1" ] }, { "text": "バージョン 10.0.9 未満の ZCS が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json" ], "evidenceIds": [ "E1" ] }, { "text": "バージョン 10.1.1 未満の ZCS が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃者は認証されていない状態で利用できます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Synacor Zimbra Collaboration Suite (ZCS)」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-45519", "https://wiki.zimbra.com/wiki/Security_Center", "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy", "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519", "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "https://nvd.nist.gov/vuln/detail/CVE-2024-45519" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2024-45519」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-45519", "https://wiki.zimbra.com/wiki/Security_Center", "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy", "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519", "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "https://nvd.nist.gov/vuln/detail/CVE-2024-45519" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-45519", "https://wiki.zimbra.com/wiki/Security_Center", "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy", "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519", "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "https://nvd.nist.gov/vuln/detail/CVE-2024-45519" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-45519", "https://wiki.zimbra.com/wiki/Security_Center", "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy", "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519", "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "https://nvd.nist.gov/vuln/detail/CVE-2024-45519" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-45519", "https://wiki.zimbra.com/wiki/Security_Center", "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy", "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes", "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519", "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "https://nvd.nist.gov/vuln/detail/CVE-2024-45519" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-45519", "label": "CVE公式レコード" }, { "url": "https://wiki.zimbra.com/wiki/Security_Center", "label": "CVE掲載の参考情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy", "label": "CVE掲載の参考情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.1.1#Security_Fixes", "label": "CVE掲載の参考情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.9#Security_Fixes", "label": "CVE掲載の参考情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P41#Security_Fixes", "label": "CVE掲載の参考情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes", "label": "CVE掲載の参考情報" }, { "url": "https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45519", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519", "sourceField": "retained:/originalText", "excerpt": "Synacor Zimbra Collaboration Suite (ZCS) contains an unspecified vulnerability in the postjournal service that may allow an unauthenticated user to execute commands.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/45xxx/CVE-2024-45519.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-45519", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-45519\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-45519（Synacor Zimbra Collaboration Suite (ZCS)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は Zimbra Collaboration Suite (ZCS) の postjournal サービスです。\n・バージョン 8.8.15 Patch 46 未満の ZCS が影響を受けます。\n・バージョン 9.0.0 Patch 41 未満の ZCS が影響を受けます。\n・バージョン 10.0.9 未満の ZCS が影響を受けます。\n・バージョン 10.1.1 未満の ZCS が影響を受けます。\n・攻撃者は認証されていない状態で利用できます。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-45519", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T06:12:33.756Z", "lastSuccess": "2026-10-24T06:12:33.756Z", "sourceCheckedAt": "2026-10-24T06:12:33.756Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-29824", "aliases": [], "title": "EPM：コード実行", "summary": "Ivanti EPM の Core サーバーに未特定の SQL インジェクション脆弱性があり、2022 SU5 において、同一ネットワーク内の認証されていない攻撃者が任意のコードを実行できる。", "risk": "攻撃者はサーバー上で任意のコードを実行できるため、システムが制御される可能性がある。", "product": "EPM", "category": "other", "component": "package", "severity": "critical", "cvss": 9.6, "cvssVersion": "3.0", "cvssSource": "hackerone", "cvssVector": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "affected": [ { "product": "EPM", "range": ">= 2022 SU5 / <= 2022 SU5" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "「CVE-2024-29824」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29824.json", "label": "CVE：hackerone" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-29824", "label": "CVE公式レコード" }, { "url": "https://forums.ivanti.com/s/article/Security-Advisory-May-2024", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29824", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-05-31T17:38:31.331Z", "modifiedAt": "2025-10-21T23:05:16.909Z", "fetchedAt": "2026-10-24T07:16:28.014Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "vendor": "Ivanti", "product": "EPM", "versions": [ { "version": "2022 SU5", "status": "affected", "lessThanOrEqual": "2022 SU5", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-29824", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29824.json", "fetchedAt": "2026-10-24T07:16:28.014Z", "publishedAt": "2024-05-31T17:38:31.331Z", "modifiedAt": "2025-10-21T23:05:16.909Z", "state": "published", "provider": "hackerone", "title": "", "descriptions": [ { "lang": "en", "value": "An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same network to execute arbitrary code.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Ivanti", "product": "EPM", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "2022 SU5", "lessThanOrEqual": "2022 SU5", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [], "metrics": [ { "version": "3.0", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9.6, "baseSeverity": "CRITICAL", "provider": "hackerone", "sourcePath": "/containers/cna/metrics/0/cvssV3_0" } ], "references": [ { "url": "https://forums.ivanti.com/s/article/Security-Advisory-May-2024", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29824", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29824.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ivanti\",\"product\":\"EPM\",\"versions\":[{\"version\":\"2022 SU5\",\"status\":\"affected\",\"lessThanOrEqual\":\"2022 SU5\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29824.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29824.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_0", "text": "{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":9.6,\"baseSeverity\":\"CRITICAL\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-29824:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "sourcePath": "retained:/originalText", "text": "Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same network to execute arbitrary code.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-29824:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "modifiedAt": "2024-10-02T00:00:00.000Z", "fetchedAt": "2026-10-24T06:17:49.270Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:16.909Z", "fetchedAt": "2026-10-24T07:16:28.014Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-10-02T00:00:00.000Z", "fetchedAt": "2026-10-24T06:17:49.270Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "EPMにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T07:16:28.014Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "6c7a03dbcd51f166e5c0dbcb62635cc24671c71e8225cdef3162d22b75b128b4", "sourceModifiedAt": "2025-10-21T23:05:16.909Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Ivanti EPM の Core サーバーに未特定の SQL インジェクション脆弱性があり、2022 SU5 において、同一ネットワーク内の認証されていない攻撃者が任意のコードを実行できる。", "risk": "攻撃者はサーバー上で任意のコードを実行できるため、システムが制御される可能性がある。", "summaryEvidenceIds": [ "E1", "E2", "E3" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "同一ネットワーク内の認証されていない攻撃者が対象になる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29824.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Ivanti / EPM。影響ありとして記載：2022 SU5（対象表の開始値と上限が同じ版で、上限を含む表記）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29824.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29824.json" ], "evidenceIds": [ "E3" ] }, { "text": "「EPM」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-29824", "https://forums.ivanti.com/s/article/Security-Advisory-May-2024", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "https://nvd.nist.gov/vuln/detail/CVE-2024-29824" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824" ], "evidenceIds": [ "E4", "E5" ] }, { "text": "「CVE-2024-29824」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-29824", "https://forums.ivanti.com/s/article/Security-Advisory-May-2024", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "https://nvd.nist.gov/vuln/detail/CVE-2024-29824" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-29824", "https://forums.ivanti.com/s/article/Security-Advisory-May-2024", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "https://nvd.nist.gov/vuln/detail/CVE-2024-29824" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-29824", "https://forums.ivanti.com/s/article/Security-Advisory-May-2024", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "https://nvd.nist.gov/vuln/detail/CVE-2024-29824" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29824.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-29824", "https://forums.ivanti.com/s/article/Security-Advisory-May-2024", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "https://nvd.nist.gov/vuln/detail/CVE-2024-29824" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29824.json", "label": "CVE：hackerone" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-29824", "label": "CVE公式レコード" }, { "url": "https://forums.ivanti.com/s/article/Security-Advisory-May-2024", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29824", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29824.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "sourceField": "retained:/originalText", "excerpt": "Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same network to execute arbitrary code.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29824.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"vendor\":\"Ivanti\",\"product\":\"EPM\",\"versions\":[{\"version\":\"2022 SU5\",\"status\":\"affected\",\"lessThanOrEqual\":\"2022 SU5\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29824", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-29824\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-29824（EPM）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・同一ネットワーク内の認証されていない攻撃者が対象になる。\n・公式の対象表：Ivanti / EPM。影響ありとして記載：2022 SU5（対象表の開始値と上限が同じ版で、上限を含む表記）。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-29824", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T07:16:28.014Z", "lastSuccess": "2026-10-24T07:16:28.014Z", "sourceCheckedAt": "2026-10-24T07:16:28.014Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" }, { "term": "SQLインジェクション", "meaning": "入力した値がデータベースへの命令として扱われ、意図しない問い合わせや操作をされる問題です。読み取り・書き換えなど、可能なことは脆弱性ごとに異なります。", "sourceUrl": "https://cwe.mitre.org/data/definitions/89.html", "kind": "general_definition" } ] } }, { "id": "CVE-2019-0344", "aliases": [], "title": "SAP Commerce Cloud (virtualjdbc extension)：コード実行", "summary": "SAP Commerce Cloud（virtualjdbc 拡張）で安全でないデシリアライズが使用されているため、'Hybris' ユーザー権限で任意のコードを実行でき、コードインジェクションが発生します。", "risk": "攻撃者がコードインジェクションを行うことで、対象マシン上で任意の処理が実行される可能性があります。", "product": "SAP Commerce Cloud (virtualjdbc extension)", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "sap", "cvssVector": null, "affected": [ { "product": "SAP Commerce Cloud (virtualjdbc extension)", "range": "< 6.4" }, { "product": "SAP Commerce Cloud (virtualjdbc extension)", "range": "< 6.5" }, { "product": "SAP Commerce Cloud (virtualjdbc extension)", "range": "< 6.6" }, { "product": "SAP Commerce Cloud (virtualjdbc extension)", "range": "< 6.7" }, { "product": "SAP Commerce Cloud (virtualjdbc extension)", "range": "< 1808" }, { "product": "SAP Commerce Cloud (virtualjdbc extension)", "range": "< 1811" }, { "product": "SAP Commerce Cloud (virtualjdbc extension)", "range": "< 1905" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2019-0344」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0344.json", "label": "CVE：sap" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-0344", "label": "CVE公式レコード" }, { "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "label": "CVE掲載の参考情報" }, { "url": "https://launchpad.support.sap.com/#/notes/2786035", "label": "CVE掲載の参考情報" }, { "url": "https://web.archive.org/web/20191214053020/https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0344", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2019-08-14T13:53:21.000Z", "modifiedAt": "2025-10-21T23:45:32.174Z", "fetchedAt": "2026-10-24T08:35:52.828Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "SAP Commerce Cloud (virtualjdbc extension)", "vendor": "SAP SE", "versions": [ { "status": "affected", "version": "< 6.4" }, { "status": "affected", "version": "< 6.5" }, { "status": "affected", "version": "< 6.6" }, { "status": "affected", "version": "< 6.7" }, { "status": "affected", "version": "< 1808" }, { "status": "affected", "version": "< 1811" }, { "status": "affected", "version": "< 1905" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2019-0344", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0344.json", "fetchedAt": "2026-10-24T08:35:52.828Z", "publishedAt": "2019-08-14T13:53:21.000Z", "modifiedAt": "2025-10-21T23:45:32.174Z", "state": "published", "provider": "sap", "title": "", "descriptions": [ { "lang": "en", "value": "Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "SAP SE", "product": "SAP Commerce Cloud (virtualjdbc extension)", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "< 6.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "< 6.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "< 6.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "< 6.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "< 1808", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "< 1811", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "< 1905", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Code Injection", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://launchpad.support.sap.com/#/notes/2786035", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0344", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0344.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"SAP Commerce Cloud (virtualjdbc extension)\",\"vendor\":\"SAP SE\",\"versions\":[{\"status\":\"affected\",\"version\":\"< 6.4\"},{\"status\":\"affected\",\"version\":\"< 6.5\"},{\"status\":\"affected\",\"version\":\"< 6.6\"},{\"status\":\"affected\",\"version\":\"< 6.7\"},{\"status\":\"affected\",\"version\":\"< 1808\"},{\"status\":\"affected\",\"version\":\"< 1811\"},{\"status\":\"affected\",\"version\":\"< 1905\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0344.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0344.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"Code Injection\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0344.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":9.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2019-0344:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344", "sourcePath": "retained:/originalText", "text": "SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2019-0344:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344", "modifiedAt": "2024-09-30T00:00:00.000Z", "fetchedAt": "2026-10-24T08:17:50.152Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:45:32.174Z", "fetchedAt": "2026-10-24T08:35:52.828Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-09-30T00:00:00.000Z", "fetchedAt": "2026-10-24T08:17:50.152Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "SAP Commerce Cloud (virtualjdbc extension)にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:35:52.828Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "88b725d220f237acfc8a9b310a3a8783e089490d1f0ecc0b030ec1c001d68079", "sourceModifiedAt": "2025-10-21T23:45:32.174Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "SAP Commerce Cloud（virtualjdbc 拡張）で安全でないデシリアライズが使用されているため、'Hybris' ユーザー権限で任意のコードを実行でき、コードインジェクションが発生します。", "risk": "攻撃者がコードインジェクションを行うことで、対象マシン上で任意の処理が実行される可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "公式の対象表：SAP SE / SAP Commerce Cloud (virtualjdbc extension)。影響ありとして記載：< 6.4。影響ありとして記載：< 6.5。影響ありとして記載：< 6.6。影響ありとして記載：< 6.7。影響ありとして記載：< 1808。影響ありとして記載：< 1811。影響ありとして記載：< 1905。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0344.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0344.json" ], "evidenceIds": [ "E2" ] }, { "text": "「SAP Commerce Cloud (virtualjdbc extension)」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2019-0344", "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "https://launchpad.support.sap.com/#/notes/2786035", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344", "https://web.archive.org/web/20191214053020/https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "https://nvd.nist.gov/vuln/detail/CVE-2019-0344" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344" ], "evidenceIds": [ "E3" ] }, { "text": "「CVE-2019-0344」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2019-0344", "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "https://launchpad.support.sap.com/#/notes/2786035", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344", "https://web.archive.org/web/20191214053020/https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "https://nvd.nist.gov/vuln/detail/CVE-2019-0344" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2019-0344", "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "https://launchpad.support.sap.com/#/notes/2786035", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344", "https://web.archive.org/web/20191214053020/https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "https://nvd.nist.gov/vuln/detail/CVE-2019-0344" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2019-0344", "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "https://launchpad.support.sap.com/#/notes/2786035", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344", "https://web.archive.org/web/20191214053020/https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "https://nvd.nist.gov/vuln/detail/CVE-2019-0344" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0344.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2019-0344", "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "https://launchpad.support.sap.com/#/notes/2786035", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344", "https://web.archive.org/web/20191214053020/https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "https://nvd.nist.gov/vuln/detail/CVE-2019-0344" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0344.json", "label": "CVE：sap" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-0344", "label": "CVE公式レコード" }, { "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "label": "CVE掲載の参考情報" }, { "url": "https://launchpad.support.sap.com/#/notes/2786035", "label": "CVE掲載の参考情報" }, { "url": "https://web.archive.org/web/20191214053020/https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0344", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0344.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/0xxx/CVE-2019-0344.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"SAP Commerce Cloud (virtualjdbc extension)\",\"vendor\":\"SAP SE\",\"versions\":[{\"status\":\"affected\",\"version\":\"< 6.4\"},{\"status\":\"affected\",\"version\":\"< 6.5\"},{\"status\":\"affected\",\"version\":\"< 6.6\"},{\"status\":\"affected\",\"version\":\"< 6.7\"},{\"status\":\"affected\",\"version\":\"< 1808\"},{\"status\":\"affected\",\"version\":\"< 1811\"},{\"status\":\"affected\",\"version\":\"< 1905\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0344", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2019-0344\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2019-0344（SAP Commerce Cloud (virtualjdbc extension)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：SAP SE / SAP Commerce Cloud (virtualjdbc extension)。影響ありとして記載：< 6.4。影響ありとして記載：< 6.5。影響ありとして記載：< 6.6。影響ありとして記載：< 6.7。影響ありとして記載：< 1808。影響ありとして記載：< 1811。影響ありとして記載：< 1905。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2019-0344", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:35:52.828Z", "lastSuccess": "2026-10-24T08:35:52.828Z", "sourceCheckedAt": "2026-10-24T08:35:52.828Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } } ], "total": 2264, "limit": 20, "offset": 1040, "filters": { "product": "all", "type": "all", "q": "", "page": 53 }, "pagination": { "page": 53, "pageSize": 20, "totalPages": 114 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-24T20:17:53.117Z", "lastAttempt": "2026-10-24T20:17:53.117Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "ok", "lastSuccess": "2026-10-24T20:17:53.117Z", "lastAttempt": "2026-10-24T20:17:53.117Z", "error": null, "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-24T20:17:53.117Z", "lastAttempt": "2026-10-24T20:17:53.117Z", "error": null, "recordCount": 1756, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "partial", "lastSuccess": "2026-10-24T13:17:49.742Z", "lastAttempt": "2026-10-24T20:17:53.117Z", "error": "未確認のページ・期間は次回の定期取得で続きから反映します。", "recordCount": 4, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-24T13:02:49.742Z 〜 2026-10-24T16:17:49.075Z、全製品の変更 2500/2744件まで確認、対象4件反映。", "cursor": { "start": "2026-10-24T13:02:49.742Z", "end": "2026-10-24T16:17:49.075Z", "kind": "modified", "index": 2500 }, "freshness": "stale", "stale": true }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-24T20:17:53.117Z", "lastAttempt": "2026-10-24T20:17:53.117Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。", "cursor": null, "freshness": "fresh", "stale": false } ] }