{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2024-30051", "aliases": [], "title": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Windows 10 Version 22H2 / Windows 11 version 22H3 / W：権限の奪取", "summary": "Windows DWM Core Library の特権昇格脆弱性", "risk": "攻撃者がこの脆弱性を利用すると、SYSTEM 権限を取得できる。", "product": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Windows 10 Version 22H2 / Windows 11 version 22H3 / W", "category": "other", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "affected": [ { "product": "Windows 10 Version 1809", "range": ">= 10.0.17763.0 / < 10.0.17763.5820（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.0 / < 10.0.17763.5820（環境: ARM64-based Systems）" }, { "product": "Windows Server 2019", "range": ">= 10.0.17763.0 / < 10.0.17763.5820（環境: x64-based Systems）" }, { "product": "Windows Server 2019 (Server Core installation)", "range": ">= 10.0.17763.0 / < 10.0.17763.5820（環境: x64-based Systems）" }, { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.2461（環境: x64-based Systems）" }, { "product": "Windows 11 version 21H2", "range": ">= 10.0.0 / < 10.0.22000.2960（環境: x64-based Systems / ARM64-based Systems）" }, { "product": "Windows 10 Version 21H2", "range": ">= 10.0.19043.0 / < 10.0.19044.4412（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 22H2", "range": ">= 10.0.22621.0 / < 10.0.22621.3593（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 10 Version 22H2", "range": ">= 10.0.19045.0 / < 10.0.19045.4412（環境: x64-based Systems / ARM64-based Systems / 32-bit Systems）" }, { "product": "Windows 11 version 22H3", "range": ">= 10.0.22631.0 / < 10.0.22631.3593（環境: ARM64-based Systems）" }, { "product": "Windows 11 Version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.3593（環境: x64-based Systems）" }, { "product": "Windows 10 Version 1507", "range": ">= 10.0.10240.0 / < 10.0.10240.20651（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1607", "range": ">= 10.0.14393.0 / < 10.0.14393.6981（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows Server 2016", "range": ">= 10.0.14393.0 / < 10.0.14393.6981（環境: x64-based Systems）" }, { "product": "Windows Server 2016 (Server Core installation)", "range": ">= 10.0.14393.0 / < 10.0.14393.6981（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "「CVE-2024-30051」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-30051", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30051", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-05-14T16:57:32.423Z", "modifiedAt": "2025-10-21T23:05:18.139Z", "fetchedAt": "2026-10-24T05:17:37.896Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Windows DWM Core Library Elevation of Privilege Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.5820", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.17763.5820", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.5820", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.5820", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.2461", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "platforms": [ "x64-based Systems", "ARM64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.22000.2960", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19043.0", "lessThan": "10.0.19044.4412", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.22621.0", "lessThan": "10.0.22621.3593", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "platforms": [ "x64-based Systems", "ARM64-based Systems", "32-bit Systems" ], "versions": [ { "version": "10.0.19045.0", "lessThan": "10.0.19045.4412", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.3593", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.3593", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.10240.0", "lessThan": "10.0.10240.20651", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.6981", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.6981", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.6981", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-30051", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "fetchedAt": "2026-10-24T05:17:37.896Z", "publishedAt": "2024-05-14T16:57:32.423Z", "modifiedAt": "2025-10-21T23:05:18.139Z", "state": "published", "provider": "microsoft", "title": "Windows DWM Core Library Elevation of Privilege Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Windows DWM Core Library Elevation of Privilege Vulnerability", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/0", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.5820", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/1", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.0", "lessThan": "10.0.17763.5820", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "sourcePath": "/containers/cna/affected/2", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.5820", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "sourcePath": "/containers/cna/affected/3", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.5820", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/4", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.2461", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "sourcePath": "/containers/cna/affected/5", "platforms": [ "x64-based Systems", "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.0", "lessThan": "10.0.22000.2960", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "sourcePath": "/containers/cna/affected/6", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "10.0.19043.0", "lessThan": "10.0.19044.4412", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "sourcePath": "/containers/cna/affected/7", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "10.0.22621.0", "lessThan": "10.0.22621.3593", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "sourcePath": "/containers/cna/affected/8", "platforms": [ "x64-based Systems", "ARM64-based Systems", "32-bit Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "10.0.19045.0", "lessThan": "10.0.19045.4412", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "sourcePath": "/containers/cna/affected/9", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.3593", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "sourcePath": "/containers/cna/affected/10", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.3593", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "sourcePath": "/containers/cna/affected/11", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "10.0.10240.0", "lessThan": "10.0.10240.20651", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "sourcePath": "/containers/cna/affected/12", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.6981", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "sourcePath": "/containers/cna/affected/13", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.6981", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "sourcePath": "/containers/cna/affected/14", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.6981", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-122", "lang": "en-US", "description": "CWE-122: Heap-based Buffer Overflow", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051", "label": "Windows DWM Core Library Elevation of Privilege Vulnerability", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-30051", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5820\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.5820\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5820\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5820\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2461\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.22000.2960\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19044.4412\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.3593\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.4412\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3593\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3593\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.20651\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.6981\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.6981\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.6981\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Windows DWM Core Library Elevation of Privilege Vulnerability", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-122: Heap-based Buffer Overflow\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-122\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-30051:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051", "sourcePath": "retained:/originalText", "text": "Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-30051:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051", "modifiedAt": "2024-05-14T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:18.139Z", "fetchedAt": "2026-10-24T05:17:37.896Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-05-14T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Windows 10 Version 22H2 / Windows 11 version 22H3 / Wに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:17:37.896Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "dd70b6a917814ea1b2a2a45dbf6c269080a6e3f8be96d058476c16062e1fa045", "sourceModifiedAt": "2025-10-21T23:05:18.139Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Windows DWM Core Library の特権昇格脆弱性", "risk": "攻撃者がこの脆弱性を利用すると、SYSTEM 権限を取得できる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.5820未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、10.0.17763.5820未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.5820未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.5820未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2461未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.0以上、10.0.22000.2960未満。対象の環境：x64-based Systems、ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19044.4412未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.3593未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.4412未満。対象の環境：x64-based Systems、ARM64-based Systems、32-bit Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.3593未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.3593未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.20651未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.6981未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.6981未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.6981未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E18" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051" ], "evidenceIds": [ "E20" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Windows 10 Version 22H2 / Windows 11 version 22H3 / W」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-30051", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051", "https://nvd.nist.gov/vuln/detail/CVE-2024-30051" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051" ], "evidenceIds": [ "E19" ] }, { "text": "「CVE-2024-30051」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-30051", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051", "https://nvd.nist.gov/vuln/detail/CVE-2024-30051" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-30051", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051", "https://nvd.nist.gov/vuln/detail/CVE-2024-30051" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-30051", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051", "https://nvd.nist.gov/vuln/detail/CVE-2024-30051" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-30051", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051", "https://nvd.nist.gov/vuln/detail/CVE-2024-30051" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-30051", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30051", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Windows DWM Core Library Elevation of Privilege Vulnerability", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/title", "excerpt": "Windows DWM Core Library Elevation of Privilege Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051", "sourceField": "retained:/originalText", "excerpt": "Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5820\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.5820\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5820\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5820\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2461\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.22000.2960\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19044.4412\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.3593\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.4412\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3593\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3593\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.20651\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.6981\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.6981\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/30xxx/CVE-2024-30051.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.6981\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E20", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-30051", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-30051\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-30051（Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Windows 10 Version 22H2 / Windows 11 version 22H3 / W）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.5820未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、10.0.17763.5820未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.5820未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.5820未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2461未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.0以上、10.0.22000.2960未満。対象の環境：x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19044.4412未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.3593未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.4412未満。対象の環境：x64-based Systems、ARM64-based Systems、32-bit Systems\n・公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.3593未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.3593未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.20651未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.6981未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.6981未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.6981未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-30051", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:17:37.896Z", "lastSuccess": "2026-10-24T05:17:37.896Z", "sourceCheckedAt": "2026-10-24T05:17:37.896Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-4671", "aliases": [], "title": "Chrome：脆弱性情報", "summary": "Google Chrome の Visuals における Use‑after‑free バグにより、レンダラープロセスが攻撃者に侵害されている場合、細工した HTML ページを表示させることでサンドボックスからの脱出が可能になる可能性があります。", "risk": "サンドボックスから脱出できると、攻撃者は Chrome の保護領域外でコードを実行できるようになる恐れがあります。", "product": "Chrome", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "Chrome", "cvssVector": null, "affected": [ { "product": "Chrome", "range": ">= 124.0.6367.201 / < 124.0.6367.201" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2024-4671」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4671.json", "label": "CVE：Chrome" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-4671", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html", "label": "CVE掲載の参考情報" }, { "url": "https://issues.chromium.org/issues/339266700", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FAWEKDQTHPN7NFEMLIWP7YMIZ2DHF36N/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWFSZNNWSQYDRYKNLBDGEXXKMBXDYQ3F/", "label": "CVE掲載の参考情報" }, { "url": "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html?m=1", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4671", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-05-09T23:54:09.853Z", "modifiedAt": "2025-10-21T23:05:18.661Z", "fetchedAt": "2026-10-24T08:12:20.874Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Google", "product": "Chrome", "versions": [ { "version": "124.0.6367.201", "status": "affected", "lessThan": "124.0.6367.201", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-4671", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4671.json", "fetchedAt": "2026-10-24T08:12:20.874Z", "publishedAt": "2024-05-09T23:54:09.853Z", "modifiedAt": "2025-10-21T23:05:18.661Z", "state": "published", "provider": "Chrome", "title": "", "descriptions": [ { "lang": "en", "value": "Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Google", "product": "Chrome", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "124.0.6367.201", "lessThan": "124.0.6367.201", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Use after free", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "baseScore": 9.6, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://issues.chromium.org/issues/339266700", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FAWEKDQTHPN7NFEMLIWP7YMIZ2DHF36N/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWFSZNNWSQYDRYKNLBDGEXXKMBXDYQ3F/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/6" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4671", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4671.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"124.0.6367.201\",\"status\":\"affected\",\"lessThan\":\"124.0.6367.201\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4671.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4671.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Use after free\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4671.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":9.6,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-4671:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671", "sourcePath": "retained:/originalText", "text": "Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-4671:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671", "modifiedAt": "2024-05-13T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:18.661Z", "fetchedAt": "2026-10-24T08:12:20.874Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-05-13T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Chromeに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:12:20.874Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "edacf663a69a200941dae5acb26c9406843573460e98480635c075e80564e423", "sourceModifiedAt": "2025-10-21T23:05:18.661Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Google Chrome の Visuals における Use‑after‑free バグにより、レンダラープロセスが攻撃者に侵害されている場合、細工した HTML ページを表示させることでサンドボックスからの脱出が可能になる可能性があります。", "risk": "サンドボックスから脱出できると、攻撃者は Chrome の保護領域外でコードを実行できるようになる恐れがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者がレンダラープロセスをすでに侵害していることが前提です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4671.json" ], "evidenceIds": [ "E1" ] }, { "text": "細工した HTML ページをユーザーに表示させる必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4671.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも124.0.6367.201で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4671.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4671.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Chrome」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-4671", "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html", "https://issues.chromium.org/issues/339266700", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FAWEKDQTHPN7NFEMLIWP7YMIZ2DHF36N/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWFSZNNWSQYDRYKNLBDGEXXKMBXDYQ3F/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671", "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html?m=1", "https://nvd.nist.gov/vuln/detail/CVE-2024-4671" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2024-4671」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-4671", "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html", "https://issues.chromium.org/issues/339266700", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FAWEKDQTHPN7NFEMLIWP7YMIZ2DHF36N/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWFSZNNWSQYDRYKNLBDGEXXKMBXDYQ3F/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671", "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html?m=1", "https://nvd.nist.gov/vuln/detail/CVE-2024-4671" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-4671", "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html", "https://issues.chromium.org/issues/339266700", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FAWEKDQTHPN7NFEMLIWP7YMIZ2DHF36N/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWFSZNNWSQYDRYKNLBDGEXXKMBXDYQ3F/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671", "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html?m=1", "https://nvd.nist.gov/vuln/detail/CVE-2024-4671" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-4671", "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html", "https://issues.chromium.org/issues/339266700", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FAWEKDQTHPN7NFEMLIWP7YMIZ2DHF36N/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWFSZNNWSQYDRYKNLBDGEXXKMBXDYQ3F/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671", "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html?m=1", "https://nvd.nist.gov/vuln/detail/CVE-2024-4671" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4671.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-4671", "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html", "https://issues.chromium.org/issues/339266700", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FAWEKDQTHPN7NFEMLIWP7YMIZ2DHF36N/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWFSZNNWSQYDRYKNLBDGEXXKMBXDYQ3F/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671", "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html?m=1", "https://nvd.nist.gov/vuln/detail/CVE-2024-4671" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4671.json", "label": "CVE：Chrome" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-4671", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html", "label": "CVE掲載の参考情報" }, { "url": "https://issues.chromium.org/issues/339266700", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FAWEKDQTHPN7NFEMLIWP7YMIZ2DHF36N/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BWFSZNNWSQYDRYKNLBDGEXXKMBXDYQ3F/", "label": "CVE掲載の参考情報" }, { "url": "https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html?m=1", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4671", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4671.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671", "sourceField": "retained:/originalText", "excerpt": "Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4671.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"124.0.6367.201\",\"status\":\"affected\",\"lessThan\":\"124.0.6367.201\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4671", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-4671\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-4671（Chrome）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者がレンダラープロセスをすでに侵害していることが前提です。\n・細工した HTML ページをユーザーに表示させる必要があります。\n・公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも124.0.6367.201で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-4671", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:12:20.874Z", "lastSuccess": "2026-10-24T08:12:20.874Z", "sourceCheckedAt": "2026-10-24T08:12:20.874Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-7028", "aliases": [], "title": "GitLab：脆弱性情報", "summary": "GitLab CE/EE のすべてのバージョン（16.1 から 16.7 の各系列で、16.1.6 未満、16.2.9 未満、16.3.7 未満、16.4.5 未満、16.5.6 未満、16.6.4 未満、16.7.2 未満）において、ユーザーがパスワードを忘れた際のリセットメールが、確認されていないメールアドレスに送信される可能性があります。", "risk": "攻撃者がこの脆弱性を利用してパスワードリセットメールを未確認のメールアドレスに送信させ、アカウント乗っ取りを実行できる可能性があります。", "product": "GitLab", "category": "other", "component": "package", "severity": "critical", "cvss": 10, "cvssVersion": "3.1", "cvssSource": "GitLab", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "affected": [ { "product": "GitLab", "range": ">= 16.1 / < 16.1.6" }, { "product": "GitLab", "range": ">= 16.2 / < 16.2.9" }, { "product": "GitLab", "range": ">= 16.3 / < 16.3.7" }, { "product": "GitLab", "range": ">= 16.4 / < 16.4.5" }, { "product": "GitLab", "range": ">= 16.5 / < 16.5.6" }, { "product": "GitLab", "range": ">= 16.6 / < 16.6.4" }, { "product": "GitLab", "range": ">= 16.7 / < 16.7.2" } ], "fixed": [], "steps": [ "バージョン 16.7.2、16.6.4、16.5.6、16.4.5、16.3.7、16.2.9、16.1.6 以上にアップグレードする。", "「CVE-2023-7028」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json", "label": "CVE：GitLab" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-7028", "label": "CVE公式レコード" }, { "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/436084", "label": "GitLab Issue #436084" }, { "url": "https://hackerone.com/reports/2293343", "label": "HackerOne Bug Bounty Report #2293343" }, { "url": "https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7028", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-01-12T13:56:41.726Z", "modifiedAt": "2026-08-15T04:10:51.207Z", "fetchedAt": "2026-10-24T05:17:40.594Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.", "sourceTitle": "Weak Password Recovery Mechanism for Forgotten Password in GitLab", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "GitLab", "product": "GitLab", "repo": "git://git@gitlab.com:gitlab-org/gitlab.git", "cpes": [ "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*" ], "versions": [ { "version": "16.1", "status": "affected", "lessThan": "16.1.6", "versionType": "semver" }, { "version": "16.2", "status": "affected", "lessThan": "16.2.9", "versionType": "semver" }, { "version": "16.3", "status": "affected", "lessThan": "16.3.7", "versionType": "semver" }, { "version": "16.4", "status": "affected", "lessThan": "16.4.5", "versionType": "semver" }, { "version": "16.5", "status": "affected", "lessThan": "16.5.6", "versionType": "semver" }, { "version": "16.6", "status": "affected", "lessThan": "16.6.4", "versionType": "semver" }, { "version": "16.7", "status": "affected", "lessThan": "16.7.2", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-7028", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json", "fetchedAt": "2026-10-24T05:17:40.594Z", "publishedAt": "2024-01-12T13:56:41.726Z", "modifiedAt": "2026-08-15T04:10:51.207Z", "state": "published", "provider": "GitLab", "title": "Weak Password Recovery Mechanism for Forgotten Password in GitLab", "descriptions": [ { "lang": "en", "value": "An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "GitLab", "product": "GitLab", "sourcePath": "/containers/cna/affected/0", "repo": "git://git@gitlab.com:gitlab-org/gitlab.git", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [ "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*" ], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "16.1", "lessThan": "16.1.6", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "16.2", "lessThan": "16.2.9", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "16.3", "lessThan": "16.3.7", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "16.4", "lessThan": "16.4.5", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "16.5", "lessThan": "16.5.6", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "16.6", "lessThan": "16.6.4", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "16.7", "lessThan": "16.7.2", "versionType": "semver", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Upgrade to versions 16.7.2, 16.6.4, 16.5.6, 16.4.5, 16.3.7, 16.2.9, 16.1.6 or above.", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-640", "lang": "en", "description": "CWE-640: Weak Password Recovery Mechanism for Forgotten Password", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "GitLab", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/436084", "label": "GitLab Issue #436084", "tags": [ "issue-tracking", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://hackerone.com/reports/2293343", "label": "HackerOne Bug Bounty Report #2293343", "tags": [ "technical-description", "exploit", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-7028", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.vicarius.io/vsociety/posts/critical-gitlab-account-takeover-vulnerability-cve-2023-7028", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"GitLab\",\"product\":\"GitLab\",\"repo\":\"git://git@gitlab.com:gitlab-org/gitlab.git\",\"cpes\":[\"cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"16.1\",\"status\":\"affected\",\"lessThan\":\"16.1.6\",\"versionType\":\"semver\"},{\"version\":\"16.2\",\"status\":\"affected\",\"lessThan\":\"16.2.9\",\"versionType\":\"semver\"},{\"version\":\"16.3\",\"status\":\"affected\",\"lessThan\":\"16.3.7\",\"versionType\":\"semver\"},{\"version\":\"16.4\",\"status\":\"affected\",\"lessThan\":\"16.4.5\",\"versionType\":\"semver\"},{\"version\":\"16.5\",\"status\":\"affected\",\"lessThan\":\"16.5.6\",\"versionType\":\"semver\"},{\"version\":\"16.6\",\"status\":\"affected\",\"lessThan\":\"16.6.4\",\"versionType\":\"semver\"},{\"version\":\"16.7\",\"status\":\"affected\",\"lessThan\":\"16.7.2\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Upgrade to versions 16.7.2, 16.6.4, 16.5.6, 16.4.5, 16.3.7, 16.2.9, 16.1.6 or above.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"CWE-640: Weak Password Recovery Mechanism for Forgotten Password\",\"cweId\":\"CWE-640\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-7028:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "sourcePath": "retained:/originalText", "text": "GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-7028:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "modifiedAt": "2024-05-01T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-15T04:10:51.207Z", "fetchedAt": "2026-10-24T05:17:40.594Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-05-01T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "GitLabに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:17:40.594Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "85dd77a1e49aefb0e322cebdd51a04d616827767bdafeedd5d476dfb757ae46e", "sourceModifiedAt": "2026-08-15T04:10:51.207Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "GitLab CE/EE のすべてのバージョン（16.1 から 16.7 の各系列で、16.1.6 未満、16.2.9 未満、16.3.7 未満、16.4.5 未満、16.5.6 未満、16.6.4 未満、16.7.2 未満）において、ユーザーがパスワードを忘れた際のリセットメールが、確認されていないメールアドレスに送信される可能性があります。", "risk": "攻撃者がこの脆弱性を利用してパスワードリセットメールを未確認のメールアドレスに送信させ、アカウント乗っ取りを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "対象製品は GitLab Community Edition および Enterprise Edition です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者はパスワードリセット機能を呼び出すことができる必要があります。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "リセットメールが送信先として指定されたメールアドレスが、ユーザー側で未確認（検証されていない）である必要があります。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "公式の対象表：GitLab / GitLab。影響ありとして記載：16.1以上、16.1.6未満。影響ありとして記載：16.2以上、16.2.9未満。影響ありとして記載：16.3以上、16.3.7未満。影響ありとして記載：16.4以上、16.4.5未満。影響ありとして記載：16.5以上、16.5.6未満。影響ありとして記載：16.6以上、16.6.4未満。影響ありとして記載：16.7以上、16.7.2未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json" ], "evidenceIds": [ "E4" ] }, { "text": "「GitLab」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-7028", "https://gitlab.com/gitlab-org/gitlab/-/issues/436084", "https://hackerone.com/reports/2293343", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/", "https://nvd.nist.gov/vuln/detail/CVE-2023-7028" ] } ], "actions": [ { "text": "バージョン 16.7.2、16.6.4、16.5.6、16.4.5、16.3.7、16.2.9、16.1.6 以上にアップグレードする。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json" ], "evidenceIds": [ "E5" ] }, { "text": "「CVE-2023-7028」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-7028", "https://gitlab.com/gitlab-org/gitlab/-/issues/436084", "https://hackerone.com/reports/2293343", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/", "https://nvd.nist.gov/vuln/detail/CVE-2023-7028" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-7028", "https://gitlab.com/gitlab-org/gitlab/-/issues/436084", "https://hackerone.com/reports/2293343", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/", "https://nvd.nist.gov/vuln/detail/CVE-2023-7028" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-7028", "https://gitlab.com/gitlab-org/gitlab/-/issues/436084", "https://hackerone.com/reports/2293343", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/", "https://nvd.nist.gov/vuln/detail/CVE-2023-7028" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-7028", "https://gitlab.com/gitlab-org/gitlab/-/issues/436084", "https://hackerone.com/reports/2293343", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/", "https://nvd.nist.gov/vuln/detail/CVE-2023-7028" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json", "label": "CVE：GitLab" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-7028", "label": "CVE公式レコード" }, { "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/436084", "label": "GitLab Issue #436084" }, { "url": "https://hackerone.com/reports/2293343", "label": "HackerOne Bug Bounty Report #2293343" }, { "url": "https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7028", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json", "sourceField": "/containers/cna/title", "excerpt": "Weak Password Recovery Mechanism for Forgotten Password in GitLab", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "sourceField": "retained:/originalText", "excerpt": "GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"GitLab\",\"product\":\"GitLab\",\"repo\":\"git://git@gitlab.com:gitlab-org/gitlab.git\",\"cpes\":[\"cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"16.1\",\"status\":\"affected\",\"lessThan\":\"16.1.6\",\"versionType\":\"semver\"},{\"version\":\"16.2\",\"status\":\"affected\",\"lessThan\":\"16.2.9\",\"versionType\":\"semver\"},{\"version\":\"16.3\",\"status\":\"affected\",\"lessThan\":\"16.3.7\",\"versionType\":\"semver\"},{\"version\":\"16.4\",\"status\":\"affected\",\"lessThan\":\"16.4.5\",\"versionType\":\"semver\"},{\"version\":\"16.5\",\"status\":\"affected\",\"lessThan\":\"16.5.6\",\"versionType\":\"semver\"},{\"version\":\"16.6\",\"status\":\"affected\",\"lessThan\":\"16.6.4\",\"versionType\":\"semver\"},{\"version\":\"16.7\",\"status\":\"affected\",\"lessThan\":\"16.7.2\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/7xxx/CVE-2023-7028.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Upgrade to versions 16.7.2, 16.6.4, 16.5.6, 16.4.5, 16.3.7, 16.2.9, 16.1.6 or above.", "language": "en", "representation": "source_excerpt" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-7028", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-7028\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-7028（GitLab）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象製品は GitLab Community Edition および Enterprise Edition です。\n・攻撃者はパスワードリセット機能を呼び出すことができる必要があります。\n・リセットメールが送信先として指定されたメールアドレスが、ユーザー側で未確認（検証されていない）である必要があります。\n・公式の対象表：GitLab / GitLab。影響ありとして記載：16.1以上、16.1.6未満。影響ありとして記載：16.2以上、16.2.9未満。影響ありとして記載：16.3以上、16.3.7未満。影響ありとして記載：16.4以上、16.4.5未満。影響ありとして記載：16.5以上、16.5.6未満。影響ありとして記載：16.6以上、16.6.4未満。影響ありとして記載：16.7以上、16.7.2未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-7028", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:17:40.594Z", "lastSuccess": "2026-10-24T05:17:40.594Z", "sourceCheckedAt": "2026-10-24T05:17:40.594Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-29988", "aliases": [], "title": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Windows 10 Version 22H2 / Windows 11 version 22H3 / W：脆弱性情報", "summary": "SmartScreen プロンプトのセキュリティ機能を回避できる脆弱性です。", "risk": "攻撃者が Mark of the Web 機能を回避でき、他の脆弱性と組み合わせて悪意あるファイルを実行できる可能性があります。", "product": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Windows 10 Version 22H2 / Windows 11 version 22H3 / W", "category": "other", "component": "package", "severity": "high", "cvss": 8.8, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "affected": [ { "product": "Windows 10 Version 1809", "range": ">= 10.0.17763.0 / < 10.0.17763.5696（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.0 / < 10.0.17763.5696（環境: ARM64-based Systems）" }, { "product": "Windows Server 2019", "range": ">= 10.0.17763.0 / < 10.0.17763.5696（環境: x64-based Systems）" }, { "product": "Windows Server 2019 (Server Core installation)", "range": ">= 10.0.17763.0 / < 10.0.17763.5696（環境: x64-based Systems）" }, { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.2402（環境: x64-based Systems）" }, { "product": "Windows 11 version 21H2", "range": ">= 10.0.0 / < 10.0.22000.2899（環境: x64-based Systems / ARM64-based Systems）" }, { "product": "Windows 10 Version 21H2", "range": ">= 10.0.19043.0 / < 10.0.19044.4291（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 22H2", "range": ">= 10.0.22621.0 / < 10.0.22621.3447（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 10 Version 22H2", "range": ">= 10.0.19045.0 / < 10.0.19045.4291（環境: x64-based Systems / ARM64-based Systems / 32-bit Systems）" }, { "product": "Windows 11 version 22H3", "range": ">= 10.0.22631.0 / < 10.0.22631.3447（環境: ARM64-based Systems）" }, { "product": "Windows 11 Version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.3447（環境: x64-based Systems）" }, { "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "range": ">= 10.0.25398.0 / < 10.0.25398.830（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2024-29988」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-29988", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29988", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-04-09T17:00:35.822Z", "modifiedAt": "2025-10-21T23:05:21.502Z", "fetchedAt": "2026-10-24T05:17:42.557Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "SmartScreen Prompt Security Feature Bypass Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.5696", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.17763.5696", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.5696", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.5696", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.2402", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "platforms": [ "x64-based Systems", "ARM64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.22000.2899", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19043.0", "lessThan": "10.0.19044.4291", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.22621.0", "lessThan": "10.0.22621.3447", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "platforms": [ "x64-based Systems", "ARM64-based Systems", "32-bit Systems" ], "versions": [ { "version": "10.0.19045.0", "lessThan": "10.0.19045.4291", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.3447", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.3447", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.25398.0", "lessThan": "10.0.25398.830", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-29988", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "fetchedAt": "2026-10-24T05:17:42.557Z", "publishedAt": "2024-04-09T17:00:35.822Z", "modifiedAt": "2025-10-21T23:05:21.502Z", "state": "published", "provider": "microsoft", "title": "SmartScreen Prompt Security Feature Bypass Vulnerability", "descriptions": [ { "lang": "en-US", "value": "SmartScreen Prompt Security Feature Bypass Vulnerability", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/0", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.5696", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/1", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.0", "lessThan": "10.0.17763.5696", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "sourcePath": "/containers/cna/affected/2", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.5696", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "sourcePath": "/containers/cna/affected/3", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.5696", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/4", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.2402", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "sourcePath": "/containers/cna/affected/5", "platforms": [ "x64-based Systems", "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.0", "lessThan": "10.0.22000.2899", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "sourcePath": "/containers/cna/affected/6", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "10.0.19043.0", "lessThan": "10.0.19044.4291", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "sourcePath": "/containers/cna/affected/7", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "10.0.22621.0", "lessThan": "10.0.22621.3447", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "sourcePath": "/containers/cna/affected/8", "platforms": [ "x64-based Systems", "ARM64-based Systems", "32-bit Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "10.0.19045.0", "lessThan": "10.0.19045.4291", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "sourcePath": "/containers/cna/affected/9", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.3447", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "sourcePath": "/containers/cna/affected/10", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.3447", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "sourcePath": "/containers/cna/affected/11", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "10.0.25398.0", "lessThan": "10.0.25398.830", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-693", "lang": "en-US", "description": "CWE-693: Protection Mechanism Failure", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988", "label": "SmartScreen Prompt Security Feature Bypass Vulnerability", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29988", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5696\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.5696\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5696\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5696\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2402\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.22000.2899\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19044.4291\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.3447\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.4291\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3447\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3447\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.830\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "SmartScreen Prompt Security Feature Bypass Vulnerability", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-693: Protection Mechanism Failure\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-693\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":8.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-29988:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988", "sourcePath": "retained:/originalText", "text": "Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-29988:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988", "modifiedAt": "2024-04-30T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:21.502Z", "fetchedAt": "2026-10-24T05:17:42.557Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-04-30T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Windows 10 Version 22H2 / Windows 11 version 22H3 / Wに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:17:42.557Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "205c3b89cf8c8a142783d08a66a8f98afe2373ece8a24a54d068c4e58e8c2dac", "sourceModifiedAt": "2025-10-21T23:05:21.502Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "SmartScreen プロンプトのセキュリティ機能を回避できる脆弱性です。", "risk": "攻撃者が Mark of the Web 機能を回避でき、他の脆弱性と組み合わせて悪意あるファイルを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.5696未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、10.0.17763.5696未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.5696未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.5696未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2402未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.0以上、10.0.22000.2899未満。対象の環境：x64-based Systems、ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19044.4291未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.3447未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.4291未満。対象の環境：x64-based Systems、ARM64-based Systems、32-bit Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.3447未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.3447未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.830未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json" ], "evidenceIds": [ "E15" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988" ], "evidenceIds": [ "E17" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Windows 10 Version 22H2 / Windows 11 version 22H3 / W」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-29988", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988", "https://nvd.nist.gov/vuln/detail/CVE-2024-29988" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988" ], "evidenceIds": [ "E16" ] }, { "text": "「CVE-2024-29988」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-29988", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988", "https://nvd.nist.gov/vuln/detail/CVE-2024-29988" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-29988", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988", "https://nvd.nist.gov/vuln/detail/CVE-2024-29988" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-29988", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988", "https://nvd.nist.gov/vuln/detail/CVE-2024-29988" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-29988", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988", "https://nvd.nist.gov/vuln/detail/CVE-2024-29988" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-29988", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29988", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "SmartScreen Prompt Security Feature Bypass Vulnerability", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourceField": "/containers/cna/title", "excerpt": "SmartScreen Prompt Security Feature Bypass Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988", "sourceField": "retained:/originalText", "excerpt": "Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5696\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.5696\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5696\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.5696\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2402\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.22000.2899\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19044.4291\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.3447\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.4291\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3447\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3447\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29988.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.830\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E17", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29988", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-29988\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-29988（Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows Server 2022 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Windows 10 Version 22H2 / Windows 11 version 22H3 / W）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.5696未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、10.0.17763.5696未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.5696未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.5696未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2402未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.0以上、10.0.22000.2899未満。対象の環境：x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19044.4291未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.3447未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.4291未満。対象の環境：x64-based Systems、ARM64-based Systems、32-bit Systems\n・公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.3447未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.3447未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.830未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-29988", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:17:42.557Z", "lastSuccess": "2026-10-24T05:17:42.557Z", "sourceCheckedAt": "2026-10-24T05:17:42.557Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-20353", "aliases": [], "title": "Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software：サービス停止", "summary": "Cisco Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Firepower Threat Defense (FTD) ソフトウェアの管理用および VPN 用ウェブサーバーで、HTTP ヘッダーの解析時にエラーチェックが不完全であるため、認証されていないリモート攻撃者が細工した HTTP リクエストを送信すると、デバイスが予期せずリロードし、サービスが利用できなくなる（DoS）状態になる。", "risk": "デバイスがリロードすることで、サービスが停止し、利用者はその機能を利用できなくなる。", "product": "Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software", "category": "other", "component": "package", "severity": "high", "cvss": 8.6, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "affected": [ { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.1.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.1.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.20" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.24" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.28" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.33" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.35" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.38" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.16" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.21" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.29" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.25" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.20" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.22" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.29" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.32" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.33" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.34" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.35" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.40" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.41" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.43" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.44" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.45" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.46" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.48" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.1.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.1.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.24" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.29" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.30" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.35" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.37" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.38" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.40" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.41" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.47" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.48" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.50" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.52" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.54" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.55" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.56" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.58" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.62" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.65" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.6" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.19" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.30" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.6" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.22" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.23" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.16" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.21" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.1.28" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.19" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.23" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.19" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.27" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.38" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.42" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.48" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.55" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.20" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.30" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.33" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.1.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.46" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.53" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.55" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.56" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.4.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.4.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.22" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.24" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.27" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.20.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.20.1.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.20.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.6" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.7" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.8" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.10" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.11" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.9" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.12" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.13" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.14" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.15" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.16" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.17" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.18" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.5.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.5.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.7" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.7.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.6" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.7" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.8" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.9" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.10" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.11" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.12" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.13" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.14" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.15" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.16" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.17" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.1.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.2.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.6" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.6.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.4.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.5.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.3.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.3.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.3.1.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.4.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.4.1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20353", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-20353", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20353", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-04-24T18:15:57.646Z", "modifiedAt": "2025-10-21T23:05:20.706Z", "fetchedAt": "2026-10-24T05:17:46.699Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.\r\n\r This vulnerability is due to incomplete error checking when parsing an HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted web server on a device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "Cisco Adaptive Security Appliance (ASA) Software", "versions": [ { "version": "9.8.1", "status": "affected" }, { "version": "9.8.1.5", "status": "affected" }, { "version": "9.8.1.7", "status": "affected" }, { "version": "9.8.2", "status": "affected" }, { "version": "9.8.2.8", "status": "affected" }, { "version": "9.8.2.14", "status": "affected" }, { "version": "9.8.2.15", "status": "affected" }, { "version": "9.8.2.17", "status": "affected" }, { "version": "9.8.2.20", "status": "affected" }, { "version": "9.8.2.24", "status": "affected" }, { "version": "9.8.2.26", "status": "affected" }, { "version": "9.8.2.28", "status": "affected" }, { "version": "9.8.2.33", "status": "affected" }, { "version": "9.8.2.35", "status": "affected" }, { "version": "9.8.2.38", "status": "affected" }, { "version": "9.8.3.8", "status": "affected" }, { "version": "9.8.3.11", "status": "affected" }, { "version": "9.8.3.14", "status": "affected" }, { "version": "9.8.3.16", "status": "affected" }, { "version": "9.8.3.18", "status": "affected" }, { "version": "9.8.3.21", "status": "affected" }, { "version": "9.8.3", "status": "affected" }, { "version": "9.8.3.26", "status": "affected" }, { "version": "9.8.3.29", "status": "affected" }, { "version": "9.8.4", "status": "affected" }, { "version": "9.8.4.3", "status": "affected" }, { "version": "9.8.4.7", "status": "affected" }, { "version": "9.8.4.8", "status": "affected" }, { "version": "9.8.4.10", "status": "affected" }, { "version": "9.8.4.12", "status": "affected" }, { "version": "9.8.4.15", "status": "affected" }, { "version": "9.8.4.17", "status": "affected" }, { "version": "9.8.4.25", "status": "affected" }, { "version": "9.8.4.20", "status": "affected" }, { "version": "9.8.4.22", "status": "affected" }, { "version": "9.8.4.26", "status": "affected" }, { "version": "9.8.4.29", "status": "affected" }, { "version": "9.8.4.32", "status": "affected" }, { "version": "9.8.4.33", "status": "affected" }, { "version": "9.8.4.34", "status": "affected" }, { "version": "9.8.4.35", "status": "affected" }, { "version": "9.8.4.39", "status": "affected" }, { "version": "9.8.4.40", "status": "affected" }, { "version": "9.8.4.41", "status": "affected" }, { "version": "9.8.4.43", "status": "affected" }, { "version": "9.8.4.44", "status": "affected" }, { "version": "9.8.4.45", "status": "affected" }, { "version": "9.8.4.46", "status": "affected" }, { "version": "9.8.4.48", "status": "affected" }, { "version": "9.12.1", "status": "affected" }, { "version": "9.12.1.2", "status": "affected" }, { "version": "9.12.1.3", "status": "affected" }, { "version": "9.12.2", "status": "affected" }, { "version": "9.12.2.4", "status": "affected" }, { "version": "9.12.2.5", "status": "affected" }, { "version": "9.12.2.9", "status": "affected" }, { "version": "9.12.3", "status": "affected" }, { "version": "9.12.3.2", "status": "affected" }, { "version": "9.12.3.7", "status": "affected" }, { "version": "9.12.4", "status": "affected" }, { "version": "9.12.3.12", "status": "affected" }, { "version": "9.12.3.9", "status": "affected" }, { "version": "9.12.2.1", "status": "affected" }, { "version": "9.12.4.2", "status": "affected" }, { "version": "9.12.4.4", "status": "affected" }, { "version": "9.12.4.7", "status": "affected" }, { "version": "9.12.4.10", "status": "affected" }, { "version": "9.12.4.13", "status": "affected" }, { "version": "9.12.4.8", "status": "affected" }, { "version": "9.12.4.18", "status": "affected" }, { "version": "9.12.4.24", "status": "affected" }, { "version": "9.12.4.26", "status": "affected" }, { "version": "9.12.4.29", "status": "affected" }, { "version": "9.12.4.30", "status": "affected" }, { "version": "9.12.4.35", "status": "affected" }, { "version": "9.12.4.37", "status": "affected" }, { "version": "9.12.4.38", "status": "affected" }, { "version": "9.12.4.39", "status": "affected" }, { "version": "9.12.4.40", "status": "affected" }, { "version": "9.12.4.41", "status": "affected" }, { "version": "9.12.4.47", "status": "affected" }, { "version": "9.12.4.48", "status": "affected" }, { "version": "9.12.4.50", "status": "affected" }, { "version": "9.12.4.52", "status": "affected" }, { "version": "9.12.4.54", "status": "affected" }, { "version": "9.12.4.55", "status": "affected" }, { "version": "9.12.4.56", "status": "affected" }, { "version": "9.12.4.58", "status": "affected" }, { "version": "9.12.4.62", "status": "affected" }, { "version": "9.12.4.65", "status": "affected" }, { "version": "9.14.1", "status": "affected" }, { "version": "9.14.1.10", "status": "affected" }, { "version": "9.14.1.6", "status": "affected" }, { "version": "9.14.1.15", "status": "affected" }, { "version": "9.14.1.19", "status": "affected" }, { "version": "9.14.1.30", "status": "affected" }, { "version": "9.14.2", "status": "affected" }, { "version": "9.14.2.4", "status": "affected" }, { "version": "9.14.2.8", "status": "affected" }, { "version": "9.14.2.13", "status": "affected" }, { "version": "9.14.2.15", "status": "affected" }, { "version": "9.14.3", "status": "affected" }, { "version": "9.14.3.1", "status": "affected" }, { "version": "9.14.3.9", "status": "affected" }, { "version": "9.14.3.11", "status": "affected" }, { "version": "9.14.3.13", "status": "affected" }, { "version": "9.14.3.18", "status": "affected" }, { "version": "9.14.3.15", "status": "affected" }, { "version": "9.14.4", "status": "affected" }, { "version": "9.14.4.6", "status": "affected" }, { "version": "9.14.4.7", "status": "affected" }, { "version": "9.14.4.12", "status": "affected" }, { "version": "9.14.4.13", "status": "affected" }, { "version": "9.14.4.14", "status": "affected" }, { "version": "9.14.4.15", "status": "affected" }, { "version": "9.14.4.17", "status": "affected" }, { "version": "9.14.4.22", "status": "affected" }, { "version": "9.14.4.23", "status": "affected" }, { "version": "9.15.1", "status": "affected" }, { "version": "9.15.1.7", "status": "affected" }, { "version": "9.15.1.10", "status": "affected" }, { "version": "9.15.1.15", "status": "affected" }, { "version": "9.15.1.16", "status": "affected" }, { "version": "9.15.1.17", "status": "affected" }, { "version": "9.15.1.1", "status": "affected" }, { "version": "9.15.1.21", "status": "affected" }, { "version": "9.16.1", "status": "affected" }, { "version": "9.16.1.28", "status": "affected" }, { "version": "9.16.2", "status": "affected" }, { "version": "9.16.2.3", "status": "affected" }, { "version": "9.16.2.7", "status": "affected" }, { "version": "9.16.2.11", "status": "affected" }, { "version": "9.16.2.13", "status": "affected" }, { "version": "9.16.2.14", "status": "affected" }, { "version": "9.16.3", "status": "affected" }, { "version": "9.16.3.3", "status": "affected" }, { "version": "9.16.3.14", "status": "affected" }, { "version": "9.16.3.15", "status": "affected" }, { "version": "9.16.3.19", "status": "affected" }, { "version": "9.16.3.23", "status": "affected" }, { "version": "9.16.4", "status": "affected" }, { "version": "9.16.4.9", "status": "affected" }, { "version": "9.16.4.14", "status": "affected" }, { "version": "9.16.4.18", "status": "affected" }, { "version": "9.16.4.19", "status": "affected" }, { "version": "9.16.4.27", "status": "affected" }, { "version": "9.16.4.38", "status": "affected" }, { "version": "9.16.4.39", "status": "affected" }, { "version": "9.16.4.42", "status": "affected" }, { "version": "9.16.4.48", "status": "affected" }, { "version": "9.16.4.55", "status": "affected" }, { "version": "9.17.1", "status": "affected" }, { "version": "9.17.1.7", "status": "affected" }, { "version": "9.17.1.9", "status": "affected" }, { "version": "9.17.1.10", "status": "affected" }, { "version": "9.17.1.11", "status": "affected" }, { "version": "9.17.1.13", "status": "affected" }, { "version": "9.17.1.15", "status": "affected" }, { "version": "9.17.1.20", "status": "affected" }, { "version": "9.17.1.30", "status": "affected" }, { "version": "9.17.1.33", "status": "affected" }, { "version": "9.18.1", "status": "affected" }, { "version": "9.18.1.3", "status": "affected" }, { "version": "9.18.2", "status": "affected" }, { "version": "9.18.2.5", "status": "affected" }, { "version": "9.18.2.7", "status": "affected" }, { "version": "9.18.2.8", "status": "affected" }, { "version": "9.18.3", "status": "affected" }, { "version": "9.18.3.39", "status": "affected" }, { "version": "9.18.3.46", "status": "affected" }, { "version": "9.18.3.53", "status": "affected" }, { "version": "9.18.3.55", "status": "affected" }, { "version": "9.18.3.56", "status": "affected" }, { "version": "9.18.4", "status": "affected" }, { "version": "9.18.4.5", "status": "affected" }, { "version": "9.18.4.8", "status": "affected" }, { "version": "9.19.1", "status": "affected" }, { "version": "9.19.1.5", "status": "affected" }, { "version": "9.19.1.9", "status": "affected" }, { "version": "9.19.1.12", "status": "affected" }, { "version": "9.19.1.18", "status": "affected" }, { "version": "9.19.1.22", "status": "affected" }, { "version": "9.19.1.24", "status": "affected" }, { "version": "9.19.1.27", "status": "affected" }, { "version": "9.20.1", "status": "affected" }, { "version": "9.20.1.5", "status": "affected" }, { "version": "9.20.2", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Firepower Threat Defense Software", "versions": [ { "version": "6.2.3", "status": "affected" }, { "version": "6.2.3.1", "status": "affected" }, { "version": "6.2.3.2", "status": "affected" }, { "version": "6.2.3.3", "status": "affected" }, { "version": "6.2.3.4", "status": "affected" }, { "version": "6.2.3.5", "status": "affected" }, { "version": "6.2.3.6", "status": "affected" }, { "version": "6.2.3.7", "status": "affected" }, { "version": "6.2.3.8", "status": "affected" }, { "version": "6.2.3.10", "status": "affected" }, { "version": "6.2.3.11", "status": "affected" }, { "version": "6.2.3.9", "status": "affected" }, { "version": "6.2.3.12", "status": "affected" }, { "version": "6.2.3.13", "status": "affected" }, { "version": "6.2.3.14", "status": "affected" }, { "version": "6.2.3.15", "status": "affected" }, { "version": "6.2.3.16", "status": "affected" }, { "version": "6.2.3.17", "status": "affected" }, { "version": "6.2.3.18", "status": "affected" }, { "version": "6.6.0", "status": "affected" }, { "version": "6.6.0.1", "status": "affected" }, { "version": "6.6.1", "status": "affected" }, { "version": "6.6.3", "status": "affected" }, { "version": "6.6.4", "status": "affected" }, { "version": "6.6.5", "status": "affected" }, { "version": "6.6.5.1", "status": "affected" }, { "version": "6.6.5.2", "status": "affected" }, { "version": "6.6.7", "status": "affected" }, { "version": "6.6.7.1", "status": "affected" }, { "version": "6.4.0", "status": "affected" }, { "version": "6.4.0.1", "status": "affected" }, { "version": "6.4.0.3", "status": "affected" }, { "version": "6.4.0.2", "status": "affected" }, { "version": "6.4.0.4", "status": "affected" }, { "version": "6.4.0.5", "status": "affected" }, { "version": "6.4.0.6", "status": "affected" }, { "version": "6.4.0.7", "status": "affected" }, { "version": "6.4.0.8", "status": "affected" }, { "version": "6.4.0.9", "status": "affected" }, { "version": "6.4.0.10", "status": "affected" }, { "version": "6.4.0.11", "status": "affected" }, { "version": "6.4.0.12", "status": "affected" }, { "version": "6.4.0.13", "status": "affected" }, { "version": "6.4.0.14", "status": "affected" }, { "version": "6.4.0.15", "status": "affected" }, { "version": "6.4.0.16", "status": "affected" }, { "version": "6.4.0.17", "status": "affected" }, { "version": "6.7.0", "status": "affected" }, { "version": "6.7.0.1", "status": "affected" }, { "version": "6.7.0.2", "status": "affected" }, { "version": "6.7.0.3", "status": "affected" }, { "version": "7.0.0", "status": "affected" }, { "version": "7.0.0.1", "status": "affected" }, { "version": "7.0.1", "status": "affected" }, { "version": "7.0.1.1", "status": "affected" }, { "version": "7.0.2", "status": "affected" }, { "version": "7.0.2.1", "status": "affected" }, { "version": "7.0.3", "status": "affected" }, { "version": "7.0.4", "status": "affected" }, { "version": "7.0.5", "status": "affected" }, { "version": "7.0.6", "status": "affected" }, { "version": "7.0.6.1", "status": "affected" }, { "version": "7.1.0", "status": "affected" }, { "version": "7.1.0.1", "status": "affected" }, { "version": "7.1.0.2", "status": "affected" }, { "version": "7.1.0.3", "status": "affected" }, { "version": "7.2.0", "status": "affected" }, { "version": "7.2.0.1", "status": "affected" }, { "version": "7.2.1", "status": "affected" }, { "version": "7.2.2", "status": "affected" }, { "version": "7.2.3", "status": "affected" }, { "version": "7.2.4", "status": "affected" }, { "version": "7.2.4.1", "status": "affected" }, { "version": "7.2.5", "status": "affected" }, { "version": "7.2.5.1", "status": "affected" }, { "version": "7.3.0", "status": "affected" }, { "version": "7.3.1", "status": "affected" }, { "version": "7.3.1.1", "status": "affected" }, { "version": "7.4.0", "status": "affected" }, { "version": "7.4.1", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-20353", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json", "fetchedAt": "2026-10-24T05:17:46.699Z", "publishedAt": "2024-04-24T18:15:57.646Z", "modifiedAt": "2025-10-21T23:05:20.706Z", "state": "published", "provider": "cisco", "title": "", "descriptions": [ { "lang": "en", "value": "A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.\r\n\r This vulnerability is due to incomplete error checking when parsing an HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted web server on a device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an infinite loop vulnerability that can lead to remote denial of service condition.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20353", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Cisco", "product": "Cisco Adaptive Security Appliance (ASA) Software", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "9.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "9.8.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "9.8.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "9.8.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "9.8.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "9.8.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "9.8.2.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "9.8.2.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "9.8.2.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "9.8.2.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "9.8.2.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "9.8.2.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "9.8.2.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "9.8.2.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "9.8.2.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "9.8.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "9.8.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "9.8.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "9.8.3.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "9.8.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "9.8.3.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "9.8.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "9.8.3.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "9.8.3.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "9.8.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "9.8.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "9.8.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "9.8.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "9.8.4.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "9.8.4.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "9.8.4.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "9.8.4.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "9.8.4.25", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "9.8.4.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "9.8.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "9.8.4.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "9.8.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "9.8.4.32", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "9.8.4.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "9.8.4.34", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "9.8.4.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "9.8.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "9.8.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "9.8.4.41", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "9.8.4.43", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "9.8.4.44", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "9.8.4.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "9.8.4.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "9.8.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "9.12.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "9.12.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "9.12.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "9.12.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "9.12.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "9.12.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "9.12.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "9.12.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "9.12.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "9.12.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "9.12.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "9.12.3.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "9.12.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "9.12.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "9.12.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "9.12.4.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "9.12.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "9.12.4.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "9.12.4.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "9.12.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "9.12.4.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "9.12.4.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "9.12.4.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "9.12.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "9.12.4.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "9.12.4.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "9.12.4.37", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "9.12.4.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "9.12.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "9.12.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "9.12.4.41", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "9.12.4.47", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "9.12.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "9.12.4.50", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "9.12.4.52", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "9.12.4.54", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "9.12.4.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "9.12.4.56", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "9.12.4.58", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "9.12.4.62", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "9.12.4.65", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "9.14.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "9.14.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "9.14.1.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "9.14.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "9.14.1.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "9.14.1.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "9.14.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "9.14.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "9.14.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "9.14.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "9.14.2.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "9.14.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "9.14.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "9.14.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "9.14.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "9.14.3.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "9.14.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "9.14.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "9.14.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "9.14.4.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "9.14.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "9.14.4.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "9.14.4.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "9.14.4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "9.14.4.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "9.14.4.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "9.14.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "9.14.4.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "9.15.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "9.15.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "9.15.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "9.15.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "9.15.1.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "9.15.1.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "9.15.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "9.15.1.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "9.16.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "9.16.1.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "9.16.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "9.16.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "9.16.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "9.16.2.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "9.16.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "9.16.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "9.16.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "9.16.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "9.16.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "9.16.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "9.16.3.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "9.16.3.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "9.16.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "9.16.4.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "9.16.4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "9.16.4.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "9.16.4.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "9.16.4.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "9.16.4.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "9.16.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "9.16.4.42", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "9.16.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "9.16.4.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "9.17.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "9.17.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/153", "version": "9.17.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/154", "version": "9.17.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/155", "version": "9.17.1.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/156", "version": "9.17.1.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/157", "version": "9.17.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/158", "version": "9.17.1.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/159", "version": "9.17.1.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/160", "version": "9.17.1.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/161", "version": "9.18.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/162", "version": "9.18.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/163", "version": "9.18.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/164", "version": "9.18.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/165", "version": "9.18.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/166", "version": "9.18.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/167", "version": "9.18.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/168", "version": "9.18.3.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/169", "version": "9.18.3.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/170", "version": "9.18.3.53", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/171", "version": "9.18.3.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/172", "version": "9.18.3.56", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/173", "version": "9.18.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/174", "version": "9.18.4.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/175", "version": "9.18.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/176", "version": "9.19.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/177", "version": "9.19.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/178", "version": "9.19.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/179", "version": "9.19.1.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/180", "version": "9.19.1.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/181", "version": "9.19.1.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/182", "version": "9.19.1.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/183", "version": "9.19.1.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/184", "version": "9.20.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/185", "version": "9.20.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/186", "version": "9.20.2", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Firepower Threat Defense Software", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "6.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "6.2.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "6.2.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "6.2.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/4", "version": "6.2.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/5", "version": "6.2.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/6", "version": "6.2.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/7", "version": "6.2.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/8", "version": "6.2.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/9", "version": "6.2.3.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/10", "version": "6.2.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/11", "version": "6.2.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/12", "version": "6.2.3.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/13", "version": "6.2.3.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/14", "version": "6.2.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/15", "version": "6.2.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/16", "version": "6.2.3.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/17", "version": "6.2.3.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/18", "version": "6.2.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/19", "version": "6.6.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/20", "version": "6.6.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/21", "version": "6.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/22", "version": "6.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/23", "version": "6.6.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/24", "version": "6.6.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/25", "version": "6.6.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/26", "version": "6.6.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/27", "version": "6.6.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/28", "version": "6.6.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/29", "version": "6.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/30", "version": "6.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/31", "version": "6.4.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/32", "version": "6.4.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/33", "version": "6.4.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/34", "version": "6.4.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/35", "version": "6.4.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/36", "version": "6.4.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/37", "version": "6.4.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/38", "version": "6.4.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/39", "version": "6.4.0.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/40", "version": "6.4.0.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/41", "version": "6.4.0.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/42", "version": "6.4.0.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/43", "version": "6.4.0.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/44", "version": "6.4.0.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/45", "version": "6.4.0.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/46", "version": "6.4.0.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/47", "version": "6.7.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/48", "version": "6.7.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/49", "version": "6.7.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/50", "version": "6.7.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/51", "version": "7.0.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/52", "version": "7.0.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/53", "version": "7.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/54", "version": "7.0.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/55", "version": "7.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/56", "version": "7.0.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/57", "version": "7.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/58", "version": "7.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/59", "version": "7.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/60", "version": "7.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/61", "version": "7.0.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/62", "version": "7.1.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/63", "version": "7.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/64", "version": "7.1.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/65", "version": "7.1.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/66", "version": "7.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/67", "version": "7.2.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/68", "version": "7.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/69", "version": "7.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/70", "version": "7.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/71", "version": "7.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/72", "version": "7.2.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/73", "version": "7.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/74", "version": "7.2.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/75", "version": "7.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/76", "version": "7.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/77", "version": "7.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/78", "version": "7.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/79", "version": "7.4.1", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "Cisco has confirmed that this vulnerability has been exploited. Cisco strongly recommends that customers upgrade to fixed software to resolve this vulnerability. Customers are also strongly encouraged to monitor system logs for indicators of undocumented configuration changes, unscheduled reboots, and any anomalous credential activity.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-835", "lang": "en", "description": "Loop with Unreachable Exit Condition ('Infinite Loop')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "baseScore": 8.6, "baseSeverity": "HIGH", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2", "label": "cisco-sa-asaftd-websrvs-dos-X8gNucD2", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20353", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Adaptive Security Appliance (ASA) Software\",\"versions\":[{\"version\":\"9.8.1\",\"status\":\"affected\"},{\"version\":\"9.8.1.5\",\"status\":\"affected\"},{\"version\":\"9.8.1.7\",\"status\":\"affected\"},{\"version\":\"9.8.2\",\"status\":\"affected\"},{\"version\":\"9.8.2.8\",\"status\":\"affected\"},{\"version\":\"9.8.2.14\",\"status\":\"affected\"},{\"version\":\"9.8.2.15\",\"status\":\"affected\"},{\"version\":\"9.8.2.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.20\",\"status\":\"affected\"},{\"version\":\"9.8.2.24\",\"status\":\"affected\"},{\"version\":\"9.8.2.26\",\"status\":\"affected\"},{\"version\":\"9.8.2.28\",\"status\":\"affected\"},{\"version\":\"9.8.2.33\",\"status\":\"affected\"},{\"version\":\"9.8.2.35\",\"status\":\"affected\"},{\"version\":\"9.8.2.38\",\"status\":\"affected\"},{\"version\":\"9.8.3.8\",\"status\":\"affected\"},{\"version\":\"9.8.3.11\",\"status\":\"affected\"},{\"version\":\"9.8.3.14\",\"status\":\"affected\"},{\"version\":\"9.8.3.16\",\"status\":\"affected\"},{\"version\":\"9.8.3.18\",\"status\":\"affected\"},{\"version\":\"9.8.3.21\",\"status\":\"affected\"},{\"version\":\"9.8.3\",\"status\":\"affected\"},{\"version\":\"9.8.3.26\",\"status\":\"affected\"},{\"version\":\"9.8.3.29\",\"status\":\"affected\"},{\"version\":\"9.8.4\",\"status\":\"affected\"},{\"version\":\"9.8.4.3\",\"status\":\"affected\"},{\"version\":\"9.8.4.7\",\"status\":\"affected\"},{\"version\":\"9.8.4.8\",\"status\":\"affected\"},{\"version\":\"9.8.4.10\",\"status\":\"affected\"},{\"version\":\"9.8.4.12\",\"status\":\"affected\"},{\"version\":\"9.8.4.15\",\"status\":\"affected\"},{\"version\":\"9.8.4.17\",\"status\":\"affected\"},{\"version\":\"9.8.4.25\",\"status\":\"affected\"},{\"version\":\"9.8.4.20\",\"status\":\"affected\"},{\"version\":\"9.8.4.22\",\"status\":\"affected\"},{\"version\":\"9.8.4.26\",\"status\":\"affected\"},{\"version\":\"9.8.4.29\",\"status\":\"affected\"},{\"version\":\"9.8.4.32\",\"status\":\"affected\"},{\"version\":\"9.8.4.33\",\"status\":\"affected\"},{\"version\":\"9.8.4.34\",\"status\":\"affected\"},{\"version\":\"9.8.4.35\",\"status\":\"affected\"},{\"version\":\"9.8.4.39\",\"status\":\"affected\"},{\"version\":\"9.8.4.40\",\"status\":\"affected\"},{\"version\":\"9.8.4.41\",\"status\":\"affected\"},{\"version\":\"9.8.4.43\",\"status\":\"affected\"},{\"version\":\"9.8.4.44\",\"status\":\"affected\"},{\"version\":\"9.8.4.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.46\",\"status\":\"affected\"},{\"version\":\"9.8.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.1\",\"status\":\"affected\"},{\"version\":\"9.12.1.2\",\"status\":\"affected\"},{\"version\":\"9.12.1.3\",\"status\":\"affected\"},{\"version\":\"9.12.2\",\"status\":\"affected\"},{\"version\":\"9.12.2.4\",\"status\":\"affected\"},{\"version\":\"9.12.2.5\",\"status\":\"affected\"},{\"version\":\"9.12.2.9\",\"status\":\"affected\"},{\"version\":\"9.12.3\",\"status\":\"affected\"},{\"version\":\"9.12.3.2\",\"status\":\"affected\"},{\"version\":\"9.12.3.7\",\"status\":\"affected\"},{\"version\":\"9.12.4\",\"status\":\"affected\"},{\"version\":\"9.12.3.12\",\"status\":\"affected\"},{\"version\":\"9.12.3.9\",\"status\":\"affected\"},{\"version\":\"9.12.2.1\",\"status\":\"affected\"},{\"version\":\"9.12.4.2\",\"status\":\"affected\"},{\"version\":\"9.12.4.4\",\"status\":\"affected\"},{\"version\":\"9.12.4.7\",\"status\":\"affected\"},{\"version\":\"9.12.4.10\",\"status\":\"affected\"},{\"version\":\"9.12.4.13\",\"status\":\"affected\"},{\"version\":\"9.12.4.8\",\"status\":\"affected\"},{\"version\":\"9.12.4.18\",\"status\":\"affected\"},{\"version\":\"9.12.4.24\",\"status\":\"affected\"},{\"version\":\"9.12.4.26\",\"status\":\"affected\"},{\"version\":\"9.12.4.29\",\"status\":\"affected\"},{\"version\":\"9.12.4.30\",\"status\":\"affected\"},{\"version\":\"9.12.4.35\",\"status\":\"affected\"},{\"version\":\"9.12.4.37\",\"status\":\"affected\"},{\"version\":\"9.12.4.38\",\"status\":\"affected\"},{\"version\":\"9.12.4.39\",\"status\":\"affected\"},{\"version\":\"9.12.4.40\",\"status\":\"affected\"},{\"version\":\"9.12.4.41\",\"status\":\"affected\"},{\"version\":\"9.12.4.47\",\"status\":\"affected\"},{\"version\":\"9.12.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.4.50\",\"status\":\"affected\"},{\"version\":\"9.12.4.52\",\"status\":\"affected\"},{\"version\":\"9.12.4.54\",\"status\":\"affected\"},{\"version\":\"9.12.4.55\",\"status\":\"affected\"},{\"version\":\"9.12.4.56\",\"status\":\"affected\"},{\"version\":\"9.12.4.58\",\"status\":\"affected\"},{\"version\":\"9.12.4.62\",\"status\":\"affected\"},{\"version\":\"9.12.4.65\",\"status\":\"affected\"},{\"version\":\"9.14.1\",\"status\":\"affected\"},{\"version\":\"9.14.1.10\",\"status\":\"affected\"},{\"version\":\"9.14.1.6\",\"status\":\"affected\"},{\"version\":\"9.14.1.15\",\"status\":\"affected\"},{\"version\":\"9.14.1.19\",\"status\":\"affected\"},{\"version\":\"9.14.1.30\",\"status\":\"affected\"},{\"version\":\"9.14.2\",\"status\":\"affected\"},{\"version\":\"9.14.2.4\",\"status\":\"affected\"},{\"version\":\"9.14.2.8\",\"status\":\"affected\"},{\"version\":\"9.14.2.13\",\"status\":\"affected\"},{\"version\":\"9.14.2.15\",\"status\":\"affected\"},{\"version\":\"9.14.3\",\"status\":\"affected\"},{\"version\":\"9.14.3.1\",\"status\":\"affected\"},{\"version\":\"9.14.3.9\",\"status\":\"affected\"},{\"version\":\"9.14.3.11\",\"status\":\"affected\"},{\"version\":\"9.14.3.13\",\"status\":\"affected\"},{\"version\":\"9.14.3.18\",\"status\":\"affected\"},{\"version\":\"9.14.3.15\",\"status\":\"affected\"},{\"version\":\"9.14.4\",\"status\":\"affected\"},{\"version\":\"9.14.4.6\",\"status\":\"affected\"},{\"version\":\"9.14.4.7\",\"status\":\"affected\"},{\"version\":\"9.14.4.12\",\"status\":\"affected\"},{\"version\":\"9.14.4.13\",\"status\":\"affected\"},{\"version\":\"9.14.4.14\",\"status\":\"affected\"},{\"version\":\"9.14.4.15\",\"status\":\"affected\"},{\"version\":\"9.14.4.17\",\"status\":\"affected\"},{\"version\":\"9.14.4.22\",\"status\":\"affected\"},{\"version\":\"9.14.4.23\",\"status\":\"affected\"},{\"version\":\"9.15.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.7\",\"status\":\"affected\"},{\"version\":\"9.15.1.10\",\"status\":\"affected\"},{\"version\":\"9.15.1.15\",\"status\":\"affected\"},{\"version\":\"9.15.1.16\",\"status\":\"affected\"},{\"version\":\"9.15.1.17\",\"status\":\"affected\"},{\"version\":\"9.15.1.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.21\",\"status\":\"affected\"},{\"version\":\"9.16.1\",\"status\":\"affected\"},{\"version\":\"9.16.1.28\",\"status\":\"affected\"},{\"version\":\"9.16.2\",\"status\":\"affected\"},{\"version\":\"9.16.2.3\",\"status\":\"affected\"},{\"version\":\"9.16.2.7\",\"status\":\"affected\"},{\"version\":\"9.16.2.11\",\"status\":\"affected\"},{\"version\":\"9.16.2.13\",\"status\":\"affected\"},{\"version\":\"9.16.2.14\",\"status\":\"affected\"},{\"version\":\"9.16.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.14\",\"status\":\"affected\"},{\"version\":\"9.16.3.15\",\"status\":\"affected\"},{\"version\":\"9.16.3.19\",\"status\":\"affected\"},{\"version\":\"9.16.3.23\",\"status\":\"affected\"},{\"version\":\"9.16.4\",\"status\":\"affected\"},{\"version\":\"9.16.4.9\",\"status\":\"affected\"},{\"version\":\"9.16.4.14\",\"status\":\"affected\"},{\"version\":\"9.16.4.18\",\"status\":\"affected\"},{\"version\":\"9.16.4.19\",\"status\":\"affected\"},{\"version\":\"9.16.4.27\",\"status\":\"affected\"},{\"version\":\"9.16.4.38\",\"status\":\"affected\"},{\"version\":\"9.16.4.39\",\"status\":\"affected\"},{\"version\":\"9.16.4.42\",\"status\":\"affected\"},{\"version\":\"9.16.4.48\",\"status\":\"affected\"},{\"version\":\"9.16.4.55\",\"status\":\"affected\"},{\"version\":\"9.17.1\",\"status\":\"affected\"},{\"version\":\"9.17.1.7\",\"status\":\"affected\"},{\"version\":\"9.17.1.9\",\"status\":\"affected\"},{\"version\":\"9.17.1.10\",\"status\":\"affected\"},{\"version\":\"9.17.1.11\",\"status\":\"affected\"},{\"version\":\"9.17.1.13\",\"status\":\"affected\"},{\"version\":\"9.17.1.15\",\"status\":\"affected\"},{\"version\":\"9.17.1.20\",\"status\":\"affected\"},{\"version\":\"9.17.1.30\",\"status\":\"affected\"},{\"version\":\"9.17.1.33\",\"status\":\"affected\"},{\"version\":\"9.18.1\",\"status\":\"affected\"},{\"version\":\"9.18.1.3\",\"status\":\"affected\"},{\"version\":\"9.18.2\",\"status\":\"affected\"},{\"version\":\"9.18.2.5\",\"status\":\"affected\"},{\"version\":\"9.18.2.7\",\"status\":\"affected\"},{\"version\":\"9.18.2.8\",\"status\":\"affected\"},{\"version\":\"9.18.3\",\"status\":\"affected\"},{\"version\":\"9.18.3.39\",\"status\":\"affected\"},{\"version\":\"9.18.3.46\",\"status\":\"affected\"},{\"version\":\"9.18.3.53\",\"status\":\"affected\"},{\"version\":\"9.18.3.55\",\"status\":\"affected\"},{\"version\":\"9.18.3.56\",\"status\":\"affected\"},{\"version\":\"9.18.4\",\"status\":\"affected\"},{\"version\":\"9.18.4.5\",\"status\":\"affected\"},{\"version\":\"9.18.4.8\",\"status\":\"affected\"},{\"version\":\"9.19.1\",\"status\":\"affected\"},{\"version\":\"9.19.1.5\",\"status\":\"affected\"},{\"version\":\"9.19.1.9\",\"status\":\"affected\"},{\"version\":\"9.19.1.12\",\"status\":\"affected\"},{\"version\":\"9.19.1.18\",\"status\":\"affected\"},{\"version\":\"9.19.1.22\",\"status\":\"affected\"},{\"version\":\"9.19.1.24\",\"status\":\"affected\"},{\"version\":\"9.19.1.27\",\"status\":\"affected\"},{\"version\":\"9.20.1\",\"status\":\"affected\"},{\"version\":\"9.20.1.5\",\"status\":\"affected\"},{\"version\":\"9.20.2\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Firepower Threat Defense Software\",\"versions\":[{\"version\":\"6.2.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.1\",\"status\":\"affected\"},{\"version\":\"6.2.3.2\",\"status\":\"affected\"},{\"version\":\"6.2.3.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.4\",\"status\":\"affected\"},{\"version\":\"6.2.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.3.6\",\"status\":\"affected\"},{\"version\":\"6.2.3.7\",\"status\":\"affected\"},{\"version\":\"6.2.3.8\",\"status\":\"affected\"},{\"version\":\"6.2.3.10\",\"status\":\"affected\"},{\"version\":\"6.2.3.11\",\"status\":\"affected\"},{\"version\":\"6.2.3.9\",\"status\":\"affected\"},{\"version\":\"6.2.3.12\",\"status\":\"affected\"},{\"version\":\"6.2.3.13\",\"status\":\"affected\"},{\"version\":\"6.2.3.14\",\"status\":\"affected\"},{\"version\":\"6.2.3.15\",\"status\":\"affected\"},{\"version\":\"6.2.3.16\",\"status\":\"affected\"},{\"version\":\"6.2.3.17\",\"status\":\"affected\"},{\"version\":\"6.2.3.18\",\"status\":\"affected\"},{\"version\":\"6.6.0\",\"status\":\"affected\"},{\"version\":\"6.6.0.1\",\"status\":\"affected\"},{\"version\":\"6.6.1\",\"status\":\"affected\"},{\"version\":\"6.6.3\",\"status\":\"affected\"},{\"version\":\"6.6.4\",\"status\":\"affected\"},{\"version\":\"6.6.5\",\"status\":\"affected\"},{\"version\":\"6.6.5.1\",\"status\":\"affected\"},{\"version\":\"6.6.5.2\",\"status\":\"affected\"},{\"version\":\"6.6.7\",\"status\":\"affected\"},{\"version\":\"6.6.7.1\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"status\":\"affected\"},{\"version\":\"6.4.0.1\",\"status\":\"affected\"},{\"version\":\"6.4.0.3\",\"status\":\"affected\"},{\"version\":\"6.4.0.2\",\"status\":\"affected\"},{\"version\":\"6.4.0.4\",\"status\":\"affected\"},{\"version\":\"6.4.0.5\",\"status\":\"affected\"},{\"version\":\"6.4.0.6\",\"status\":\"affected\"},{\"version\":\"6.4.0.7\",\"status\":\"affected\"},{\"version\":\"6.4.0.8\",\"status\":\"affected\"},{\"version\":\"6.4.0.9\",\"status\":\"affected\"},{\"version\":\"6.4.0.10\",\"status\":\"affected\"},{\"version\":\"6.4.0.11\",\"status\":\"affected\"},{\"version\":\"6.4.0.12\",\"status\":\"affected\"},{\"version\":\"6.4.0.13\",\"status\":\"affected\"},{\"version\":\"6.4.0.14\",\"status\":\"affected\"},{\"version\":\"6.4.0.15\",\"status\":\"affected\"},{\"version\":\"6.4.0.16\",\"status\":\"affected\"},{\"version\":\"6.4.0.17\",\"status\":\"affected\"},{\"version\":\"6.7.0\",\"status\":\"affected\"},{\"version\":\"6.7.0.1\",\"status\":\"affected\"},{\"version\":\"6.7.0.2\",\"status\":\"affected\"},{\"version\":\"6.7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"status\":\"affected\"},{\"version\":\"7.0.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1.1\",\"status\":\"affected\"},{\"version\":\"7.0.2\",\"status\":\"affected\"},{\"version\":\"7.0.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.4\",\"status\":\"affected\"},{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"7.0.6\",\"status\":\"affected\"},{\"version\":\"7.0.6.1\",\"status\":\"affected\"},{\"version\":\"7.1.0\",\"status\":\"affected\"},{\"version\":\"7.1.0.1\",\"status\":\"affected\"},{\"version\":\"7.1.0.2\",\"status\":\"affected\"},{\"version\":\"7.1.0.3\",\"status\":\"affected\"},{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.2.0.1\",\"status\":\"affected\"},{\"version\":\"7.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.2.4\",\"status\":\"affected\"},{\"version\":\"7.2.4.1\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"7.2.5.1\",\"status\":\"affected\"},{\"version\":\"7.3.0\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.1\",\"status\":\"affected\"},{\"version\":\"7.4.0\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.\r\n\r This vulnerability is due to incomplete error checking when parsing an HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted web server on a device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "Cisco has confirmed that this vulnerability has been exploited. Cisco strongly recommends that customers upgrade to fixed software to resolve this vulnerability. Customers are also strongly encouraged to monitor system logs for indicators of undocumented configuration changes, unscheduled reboots, and any anomalous credential activity.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Loop with Unreachable Exit Condition ('Infinite Loop')\",\"type\":\"cwe\",\"cweId\":\"CWE-835\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-20353:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20353", "sourcePath": "retained:/originalText", "text": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an infinite loop vulnerability that can lead to remote denial of service condition.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-20353:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20353", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20353", "modifiedAt": "2024-04-24T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:20.706Z", "fetchedAt": "2026-10-24T05:17:46.699Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-04-24T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Softwareにサービス停止に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "処理の停止や過大な負荷により、サービスを利用できなくなる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:17:46.699Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "63d8b5e77c126ba2de6ef674917d9a7fade1b832bdf5550e4c9ba89e790bfa15", "sourceModifiedAt": "2025-10-21T23:05:20.706Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Firepower Threat Defense (FTD) ソフトウェアの管理用および VPN 用ウェブサーバーで、HTTP ヘッダーの解析時にエラーチェックが不完全であるため、認証されていないリモート攻撃者が細工した HTTP リクエストを送信すると、デバイスが予期せずリロードし、サービスが利用できなくなる（DoS）状態になる。", "risk": "デバイスがリロードすることで、サービスが停止し、利用者はその機能を利用できなくなる。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者は認証されていないリモートの外部からである必要がある。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json" ], "evidenceIds": [ "E1" ] }, { "text": "対象は管理用ウェブサーバーまたは VPN 用ウェブサーバーである。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃者は細工した HTTP リクエストを送信できる必要がある。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Cisco / Cisco Adaptive Security Appliance (ASA) Software。影響ありとして記載：9.8.1。影響ありとして記載：9.8.1.5。影響ありとして記載：9.8.1.7。影響ありとして記載：9.8.2。影響ありとして記載：9.8.2.8。影響ありとして記載：9.8.2.14。影響ありとして記載：9.8.2.15。影響ありとして記載：9.8.2.17。影響ありとして記載：9.8.2.20。影響ありとして記載：9.8.2.24。影響ありとして記載：9.8.2.26。影響ありとして記載：9.8.2.28。影響ありとして記載：9.8.2.33。影響ありとして記載：9.8.2.35。影響ありとして記載：9.8.2.38。影響ありとして記載：9.8.3.8。影響ありとして記載：9.8.3.11。影響ありとして記載：9.8.3.14。影響ありとして記載：9.8.3.16。影響ありとして記載：9.8.3.18。影響ありとして記載：9.8.3.21。影響ありとして記載：9.8.3。影響ありとして記載：9.8.3.26。影響ありとして記載：9.8.3.29。影響ありとして記載：9.8.4。影響ありとして記載：9.8.4.3。影響ありとして記載：9.8.4.7。影響ありとして記載：9.8.4.8。影響ありとして記載：9.8.4.10。影響ありとして記載：9.8.4.12。影響ありとして記載：9.8.4.15。影響ありとして記載：9.8.4.17。影響ありとして記載：9.8.4.25。影響ありとして記載：9.8.4.20。影響ありとして記載：9.8.4.22。影響ありとして記載：9.8.4.26。影響ありとして記載：9.8.4.29。影響ありとして記載：9.8.4.32。影響ありとして記載：9.8.4.33。影響ありとして記載：9.8.4.34。影響ありとして記載：9.8.4.35。影響ありとして記載：9.8.4.39。影響ありとして記載：9.8.4.40。影響ありとして記載：9.8.4.41。影響ありとして記載：9.8.4.43。影響ありとして記載：9.8.4.44。影響ありとして記載：9.8.4.45。影響ありとして記載：9.8.4.46。影響ありとして記載：9.8.4.48。影響ありとして記載：9.12.1。影響ありとして記載：9.12.1.2。影響ありとして記載：9.12.1.3。影響ありとして記載：9.12.2。影響ありとして記載：9.12.2.4。影響ありとして記載：9.12.2.5。影響ありとして記載：9.12.2.9。影響ありとして記載：9.12.3。影響ありとして記載：9.12.3.2。影響ありとして記載：9.12.3.7。影響ありとして記載：9.12.4。影響ありとして記載：9.12.3.12。影響ありとして記載：9.12.3.9。影響ありとして記載：9.12.2.1。影響ありとして記載：9.12.4.2。影響ありとして記載：9.12.4.4。影響ありとして記載：9.12.4.7。影響ありとして記載：9.12.4.10。影響ありとして記載：9.12.4.13。影響ありとして記載：9.12.4.8。影響ありとして記載：9.12.4.18。影響ありとして記載：9.12.4.24。影響ありとして記載：9.12.4.26。影響ありとして記載：9.12.4.29。影響ありとして記載：9.12.4.30。影響ありとして記載：9.12.4.35。影響ありとして記載：9.12.4.37。影響ありとして記載：9.12.4.38。影響ありとして記載：9.12.4.39。影響ありとして記載：9.12.4.40。影響ありとして記載：9.12.4.41。影響ありとして記載：9.12.4.47。影響ありとして記載：9.12.4.48。影響ありとして記載：9.12.4.50。影響ありとして記載：9.12.4.52。影響ありとして記載：9.12.4.54。影響ありとして記載：9.12.4.55。影響ありとして記載：9.12.4.56。影響ありとして記載：9.12.4.58。影響ありとして記載：9.12.4.62。影響ありとして記載：9.12.4.65。影響ありとして記載：9.14.1。影響ありとして記載：9.14.1.10。影響ありとして記載：9.14.1.6。影響ありとして記載：9.14.1.15。影響ありとして記載：9.14.1.19。影響ありとして記載：9.14.1.30。影響ありとして記載：9.14.2。影響ありとして記載：9.14.2.4。影響ありとして記載：9.14.2.8。影響ありとして記載：9.14.2.13。影響ありとして記載：9.14.2.15。影響ありとして記載：9.14.3。影響ありとして記載：9.14.3.1。影響ありとして記載：9.14.3.9。影響ありとして記載：9.14.3.11。影響ありとして記載：9.14.3.13。影響ありとして記載：9.14.3.18。影響ありとして記載：9.14.3.15。影響ありとして記載：9.14.4。影響ありとして記載：9.14.4.6。影響ありとして記載：9.14.4.7。影響ありとして記載：9.14.4.12。影響ありとして記載：9.14.4.13。影響ありとして記載：9.14.4.14。影響ありとして記載：9.14.4.15。影響ありとして記載：9.14.4.17。影響ありとして記載：9.14.4.22。影響ありとして記載：9.14.4.23。影響ありとして記載：9.15.1。影響ありとして記載：9.15.1.7。影響ありとして記載：9.15.1.10。影響ありとして記載：9.15.1.15。影響ありとして記載：9.15.1.16。影響ありとして記載：9.15.1.17。影響ありとして記載：9.15.1.1。影響ありとして記載：9.15.1.21。影響ありとして記載：9.16.1。影響ありとして記載：9.16.1.28。影響ありとして記載：9.16.2。影響ありとして記載：9.16.2.3。影響ありとして記載：9.16.2.7。影響ありとして記載：9.16.2.11。影響ありとして記載：9.16.2.13。影響ありとして記載：9.16.2.14。影響ありとして記載：9.16.3。影響ありとして記載：9.16.3.3。影響ありとして記載：9.16.3.14。影響ありとして記載：9.16.3.15。影響ありとして記載：9.16.3.19。影響ありとして記載：9.16.3.23。影響ありとして記載：9.16.4。影響ありとして記載：9.16.4.9。影響ありとして記載：9.16.4.14。影響ありとして記載：9.16.4.18。影響ありとして記載：9.16.4.19。影響ありとして記載：9.16.4.27。影響ありとして記載：9.16.4.38。影響ありとして記載：9.16.4.39。影響ありとして記載：9.16.4.42。影響ありとして記載：9.16.4.48。影響ありとして記載：9.16.4.55。影響ありとして記載：9.17.1。影響ありとして記載：9.17.1.7。影響ありとして記載：9.17.1.9。影響ありとして記載：9.17.1.10。影響ありとして記載：9.17.1.11。影響ありとして記載：9.17.1.13。影響ありとして記載：9.17.1.15。影響ありとして記載：9.17.1.20。影響ありとして記載：9.17.1.30。影響ありとして記載：9.17.1.33。影響ありとして記載：9.18.1。影響ありとして記載：9.18.1.3。影響ありとして記載：9.18.2。影響ありとして記載：9.18.2.5。影響ありとして記載：9.18.2.7。影響ありとして記載：9.18.2.8。影響ありとして記載：9.18.3。影響ありとして記載：9.18.3.39。影響ありとして記載：9.18.3.46。影響ありとして記載：9.18.3.53。影響ありとして記載：9.18.3.55。影響ありとして記載：9.18.3.56。影響ありとして記載：9.18.4。影響ありとして記載：9.18.4.5。影響ありとして記載：9.18.4.8。影響ありとして記載：9.19.1。影響ありとして記載：9.19.1.5。影響ありとして記載：9.19.1.9。影響ありとして記載：9.19.1.12。影響ありとして記載：9.19.1.18。影響ありとして記載：9.19.1.22。影響ありとして記載：9.19.1.24。影響ありとして記載：9.19.1.27。影響ありとして記載：9.20.1。影響ありとして記載：9.20.1.5。影響ありとして記載：9.20.2。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Cisco / Cisco Firepower Threat Defense Software。影響ありとして記載：6.2.3。影響ありとして記載：6.2.3.1。影響ありとして記載：6.2.3.2。影響ありとして記載：6.2.3.3。影響ありとして記載：6.2.3.4。影響ありとして記載：6.2.3.5。影響ありとして記載：6.2.3.6。影響ありとして記載：6.2.3.7。影響ありとして記載：6.2.3.8。影響ありとして記載：6.2.3.10。影響ありとして記載：6.2.3.11。影響ありとして記載：6.2.3.9。影響ありとして記載：6.2.3.12。影響ありとして記載：6.2.3.13。影響ありとして記載：6.2.3.14。影響ありとして記載：6.2.3.15。影響ありとして記載：6.2.3.16。影響ありとして記載：6.2.3.17。影響ありとして記載：6.2.3.18。影響ありとして記載：6.6.0。影響ありとして記載：6.6.0.1。影響ありとして記載：6.6.1。影響ありとして記載：6.6.3。影響ありとして記載：6.6.4。影響ありとして記載：6.6.5。影響ありとして記載：6.6.5.1。影響ありとして記載：6.6.5.2。影響ありとして記載：6.6.7。影響ありとして記載：6.6.7.1。影響ありとして記載：6.4.0。影響ありとして記載：6.4.0.1。影響ありとして記載：6.4.0.3。影響ありとして記載：6.4.0.2。影響ありとして記載：6.4.0.4。影響ありとして記載：6.4.0.5。影響ありとして記載：6.4.0.6。影響ありとして記載：6.4.0.7。影響ありとして記載：6.4.0.8。影響ありとして記載：6.4.0.9。影響ありとして記載：6.4.0.10。影響ありとして記載：6.4.0.11。影響ありとして記載：6.4.0.12。影響ありとして記載：6.4.0.13。影響ありとして記載：6.4.0.14。影響ありとして記載：6.4.0.15。影響ありとして記載：6.4.0.16。影響ありとして記載：6.4.0.17。影響ありとして記載：6.7.0。影響ありとして記載：6.7.0.1。影響ありとして記載：6.7.0.2。影響ありとして記載：6.7.0.3。影響ありとして記載：7.0.0。影響ありとして記載：7.0.0.1。影響ありとして記載：7.0.1。影響ありとして記載：7.0.1.1。影響ありとして記載：7.0.2。影響ありとして記載：7.0.2.1。影響ありとして記載：7.0.3。影響ありとして記載：7.0.4。影響ありとして記載：7.0.5。影響ありとして記載：7.0.6。影響ありとして記載：7.0.6.1。影響ありとして記載：7.1.0。影響ありとして記載：7.1.0.1。影響ありとして記載：7.1.0.2。影響ありとして記載：7.1.0.3。影響ありとして記載：7.2.0。影響ありとして記載：7.2.0.1。影響ありとして記載：7.2.1。影響ありとして記載：7.2.2。影響ありとして記載：7.2.3。影響ありとして記載：7.2.4。影響ありとして記載：7.2.4.1。影響ありとして記載：7.2.5。影響ありとして記載：7.2.5.1。影響ありとして記載：7.3.0。影響ありとして記載：7.3.1。影響ありとして記載：7.3.1.1。影響ありとして記載：7.4.0。影響ありとして記載：7.4.1。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20353" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-20353", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20353", "https://nvd.nist.gov/vuln/detail/CVE-2024-20353" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20353" ], "evidenceIds": [ "E4" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-20353", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20353", "https://nvd.nist.gov/vuln/detail/CVE-2024-20353" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20353", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-20353", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20353", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.\r\n\r This vulnerability is due to incomplete error checking when parsing an HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted web server on a device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Adaptive Security Appliance (ASA) Software\",\"versions\":[{\"version\":\"9.8.1\",\"status\":\"affected\"},{\"version\":\"9.8.1.5\",\"status\":\"affected\"},{\"version\":\"9.8.1.7\",\"status\":\"affected\"},{\"version\":\"9.8.2\",\"status\":\"affected\"},{\"version\":\"9.8.2.8\",\"status\":\"affected\"},{\"version\":\"9.8.2.14\",\"status\":\"affected\"},{\"version\":\"9.8.2.15\",\"status\":\"affected\"},{\"version\":\"9.8.2.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.20\",\"status\":\"affected\"},{\"version\":\"9.8.2.24\",\"status\":\"affected\"},{\"version\":\"9.8.2.26\",\"status\":\"affected\"},{\"version\":\"9.8.2.28\",\"status\":\"affected\"},{\"version\":\"9.8.2.33\",\"status\":\"affected\"},{\"version\":\"9.8.2.35\",\"status\":\"affected\"},{\"version\":\"9.8.2.38\",\"status\":\"affected\"},{\"version\":\"9.8.3.8\",\"status\":\"affected\"},{\"version\":\"9.8.3.11\",\"status\":\"affected\"},{\"version\":\"9.8.3.14\",\"status\":\"affected\"},{\"version\":\"9.8.3.16\",\"status\":\"affected\"},{\"version\":\"9.8.3.18\",\"status\":\"affected\"},{\"version\":\"9.8.3.21\",\"status\":\"affected\"},{\"version\":\"9.8.3\",\"status\":\"affected\"},{\"version\":\"9.8.3.26\",\"status\":\"affected\"},{\"version\":\"9.8.3.29\",\"status\":\"affected\"},{\"version\":\"9.8.4\",\"status\":\"affected\"},{\"version\":\"9.8.4.3\",\"status\":\"affected\"},{\"version\":\"9.8.4.7\",\"status\":\"affected\"},{\"version\":\"9.8.4.8\",\"status\":\"affected\"},{\"version\":\"9.8.4.10\",\"status\":\"affected\"},{\"version\":\"9.8.4.12\",\"status\":\"affected\"},{\"version\":\"9.8.4.15\",\"status\":\"affected\"},{\"version\":\"9.8.4.17\",\"status\":\"affected\"},{\"version\":\"9.8.4.25\",\"status\":\"affected\"},{\"version\":\"9.8.4.20\",\"status\":\"affected\"},{\"version\":\"9.8.4.22\",\"status\":\"affected\"},{\"version\":\"9.8.4.26\",\"status\":\"affected\"},{\"version\":\"9.8.4.29\",\"status\":\"affected\"},{\"version\":\"9.8.4.32\",\"status\":\"affected\"},{\"version\":\"9.8.4.33\",\"status\":\"affected\"},{\"version\":\"9.8.4.34\",\"status\":\"affected\"},{\"version\":\"9.8.4.35\",\"status\":\"affected\"},{\"version\":\"9.8.4.39\",\"status\":\"affected\"},{\"version\":\"9.8.4.40\",\"status\":\"affected\"},{\"version\":\"9.8.4.41\",\"status\":\"affected\"},{\"version\":\"9.8.4.43\",\"status\":\"affected\"},{\"version\":\"9.8.4.44\",\"status\":\"affected\"},{\"version\":\"9.8.4.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.46\",\"status\":\"affected\"},{\"version\":\"9.8.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.1\",\"status\":\"affected\"},{\"version\":\"9.12.1.2\",\"status\":\"affected\"},{\"version\":\"9.12.1.3\",\"status\":\"affected\"},{\"version\":\"9.12.2\",\"status\":\"affected\"},{\"version\":\"9.12.2.4\",\"status\":\"affected\"},{\"version\":\"9.12.2.5\",\"status\":\"affected\"},{\"version\":\"9.12.2.9\",\"status\":\"affected\"},{\"version\":\"9.12.3\",\"status\":\"affected\"},{\"version\":\"9.12.3.2\",\"status\":\"affected\"},{\"version\":\"9.12.3.7\",\"status\":\"affected\"},{\"version\":\"9.12.4\",\"status\":\"affected\"},{\"version\":\"9.12.3.12\",\"status\":\"affected\"},{\"version\":\"9.12.3.9\",\"status\":\"affected\"},{\"version\":\"9.12.2.1\",\"status\":\"affected\"},{\"version\":\"9.12.4.2\",\"status\":\"affected\"},{\"version\":\"9.12.4.4\",\"status\":\"affected\"},{\"version\":\"9.12.4.7\",\"status\":\"affected\"},{\"version\":\"9.12.4.10\",\"status\":\"affected\"},{\"version\":\"9.12.4.13\",\"status\":\"affected\"},{\"version\":\"9.12.4.8\",\"status\":\"affected\"},{\"version\":\"9.12.4.18\",\"status\":\"affected\"},{\"version\":\"9.12.4.24\",\"status\":\"affected\"},{\"version\":\"9.12.4.26\",\"status\":\"affected\"},{\"version\":\"9.12.4.29\",\"status\":\"affected\"},{\"version\":\"9.12.4.30\",\"status\":\"affected\"},{\"version\":\"9.12.4.35\",\"status\":\"affected\"},{\"version\":\"9.12.4.37\",\"status\":\"affected\"},{\"version\":\"9.12.4.38\",\"status\":\"affected\"},{\"version\":\"9.12.4.39\",\"status\":\"affected\"},{\"version\":\"9.12.4.40\",\"status\":\"affected\"},{\"version\":\"9.12.4.41\",\"status\":\"affected\"},{\"version\":\"9.12.4.47\",\"status\":\"affected\"},{\"version\":\"9.12.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.4.50\",\"status\":\"affected\"},{\"version\":\"9.12.4.52\",\"status\":\"affected\"},{\"version\":\"9.12.4.54\",\"status\":\"affected\"},{\"version\":\"9.12.4.55\",\"status\":\"affected\"},{\"version\":\"9.12.4.56\",\"status\":\"affected\"},{\"version\":\"9.12.4.58\",\"status\":\"affected\"},{\"version\":\"9.12.4.62\",\"status\":\"affected\"},{\"version\":\"9.12.4.65\",\"status\":\"affected\"},{\"version\":\"9.14.1\",\"status\":\"affected\"},{\"version\":\"9.14.1.10\",\"status\":\"affected\"},{\"version\":\"9.14.1.6\",\"status\":\"affected\"},{\"version\":\"9.14.1.15\",\"status\":\"affected\"},{\"version\":\"9.14.1.19\",\"status\":\"affected\"},{\"version\":\"9.14.1.30\",\"status\":\"affected\"},{\"version\":\"9.14.2\",\"status\":\"affected\"},{\"version\":\"9.14.2.4\",\"status\":\"affected\"},{\"version\":\"9.14.2.8\",\"status\":\"affected\"},{\"version\":\"9.14.2.13\",\"status\":\"affected\"},{\"version\":\"9.14.2.15\",\"status\":\"affected\"},{\"version\":\"9.14.3\",\"status\":\"affected\"},{\"version\":\"9.14.3.1\",\"status\":\"affected\"},{\"version\":\"9.14.3.9\",\"status\":\"affected\"},{\"version\":\"9.14.3.11\",\"status\":\"affected\"},{\"version\":\"9.14.3.13\",\"status\":\"affected\"},{\"version\":\"9.14.3.18\",\"status\":\"affected\"},{\"version\":\"9.14.3.15\",\"status\":\"affected\"},{\"version\":\"9.14.4\",\"status\":\"affected\"},{\"version\":\"9.14.4.6\",\"status\":\"affected\"},{\"version\":\"9.14.4.7\",\"status\":\"affected\"},{\"version\":\"9.14.4.12\",\"status\":\"affected\"},{\"version\":\"9.14.4.13\",\"status\":\"affected\"},{\"version\":\"9.14.4.14\",\"status\":\"affected\"},{\"version\":\"9.14.4.15\",\"status\":\"affected\"},{\"version\":\"9.14.4.17\",\"status\":\"affected\"},{\"version\":\"9.14.4.22\",\"status\":\"affected\"},{\"version\":\"9.14.4.23\",\"status\":\"affected\"},{\"version\":\"9.15.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.7\",\"status\":\"affected\"},{\"version\":\"9.15.1.10\",\"status\":\"affected\"},{\"version\":\"9.15.1.15\",\"status\":\"affected\"},{\"version\":\"9.15.1.16\",\"status\":\"affected\"},{\"version\":\"9.15.1.17\",\"status\":\"affected\"},{\"version\":\"9.15.1.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.21\",\"status\":\"affected\"},{\"version\":\"9.16.1\",\"status\":\"affected\"},{\"version\":\"9.16.1.28\",\"status\":\"affected\"},{\"version\":\"9.16.2\",\"status\":\"affected\"},{\"version\":\"9.16.2.3\",\"status\":\"affected\"},{\"version\":\"9.16.2.7\",\"status\":\"affected\"},{\"version\":\"9.16.2.11\",\"status\":\"affected\"},{\"version\":\"9.16.2.13\",\"status\":\"affected\"},{\"version\":\"9.16.2.14\",\"status\":\"affected\"},{\"version\":\"9.16.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.14\",\"status\":\"affected\"},{\"version\":\"9.16.3.15\",\"status\":\"affected\"},{\"version\":\"9.16.3.19\",\"status\":\"affected\"},{\"version\":\"9.16.3.23\",\"status\":\"affected\"},{\"version\":\"9.16.4\",\"status\":\"affected\"},{\"version\":\"9.16.4.9\",\"status\":\"affected\"},{\"version\":\"9.16.4.14\",\"status\":\"affected\"},{\"version\":\"9.16.4.18\",\"status\":\"affected\"},{\"version\":\"9.16.4.19\",\"status\":\"affected\"},{\"version\":\"9.16.4.27\",\"status\":\"affected\"},{\"version\":\"9.16.4.38\",\"status\":\"affected\"},{\"version\":\"9.16.4.39\",\"status\":\"affected\"},{\"version\":\"9.16.4.42\",\"status\":\"affected\"},{\"version\":\"9.16.4.48\",\"status\":\"affected\"},{\"version\":\"9.16.4.55\",\"status\":\"affected\"},{\"version\":\"9.17.1\",\"status\":\"affected\"},{\"version\":\"9.17.1.7\",\"status\":\"affected\"},{\"version\":\"9.17.1.9\",\"status\":\"affected\"},{\"version\":\"9.17.1.10\",\"status\":\"affected\"},{\"version\":\"9.17.1.11\",\"status\":\"affected\"},{\"version\":\"9.17.1.13\",\"status\":\"affected\"},{\"version\":\"9.17.1.15\",\"status\":\"affected\"},{\"version\":\"9.17.1.20\",\"status\":\"affected\"},{\"version\":\"9.17.1.30\",\"status\":\"affected\"},{\"version\":\"9.17.1.33\",\"status\":\"affected\"},{\"version\":\"9.18.1\",\"status\":\"affected\"},{\"version\":\"9.18.1.3\",\"status\":\"affected\"},{\"version\":\"9.18.2\",\"status\":\"affected\"},{\"version\":\"9.18.2.5\",\"status\":\"affected\"},{\"version\":\"9.18.2.7\",\"status\":\"affected\"},{\"version\":\"9.18.2.8\",\"status\":\"affected\"},{\"version\":\"9.18.3\",\"status\":\"affected\"},{\"version\":\"9.18.3.39\",\"status\":\"affected\"},{\"version\":\"9.18.3.46\",\"status\":\"affected\"},{\"version\":\"9.18.3.53\",\"status\":\"affected\"},{\"version\":\"9.18.3.55\",\"status\":\"affected\"},{\"version\":\"9.18.3.56\",\"status\":\"affected\"},{\"version\":\"9.18.4\",\"status\":\"affected\"},{\"version\":\"9.18.4.5\",\"status\":\"affected\"},{\"version\":\"9.18.4.8\",\"status\":\"affected\"},{\"version\":\"9.19.1\",\"status\":\"affected\"},{\"version\":\"9.19.1.5\",\"status\":\"affected\"},{\"version\":\"9.19.1.9\",\"status\":\"affected\"},{\"version\":\"9.19.1.12\",\"status\":\"affected\"},{\"version\":\"9.19.1.18\",\"status\":\"affected\"},{\"version\":\"9.19.1.22\",\"status\":\"affected\"},{\"version\":\"9.19.1.24\",\"status\":\"affected\"},{\"version\":\"9.19.1.27\",\"status\":\"affected\"},{\"version\":\"9.20.1\",\"status\":\"affected\"},{\"version\":\"9.20.1.5\",\"status\":\"affected\"},{\"version\":\"9.20.2\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20353.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Firepower Threat Defense Software\",\"versions\":[{\"version\":\"6.2.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.1\",\"status\":\"affected\"},{\"version\":\"6.2.3.2\",\"status\":\"affected\"},{\"version\":\"6.2.3.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.4\",\"status\":\"affected\"},{\"version\":\"6.2.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.3.6\",\"status\":\"affected\"},{\"version\":\"6.2.3.7\",\"status\":\"affected\"},{\"version\":\"6.2.3.8\",\"status\":\"affected\"},{\"version\":\"6.2.3.10\",\"status\":\"affected\"},{\"version\":\"6.2.3.11\",\"status\":\"affected\"},{\"version\":\"6.2.3.9\",\"status\":\"affected\"},{\"version\":\"6.2.3.12\",\"status\":\"affected\"},{\"version\":\"6.2.3.13\",\"status\":\"affected\"},{\"version\":\"6.2.3.14\",\"status\":\"affected\"},{\"version\":\"6.2.3.15\",\"status\":\"affected\"},{\"version\":\"6.2.3.16\",\"status\":\"affected\"},{\"version\":\"6.2.3.17\",\"status\":\"affected\"},{\"version\":\"6.2.3.18\",\"status\":\"affected\"},{\"version\":\"6.6.0\",\"status\":\"affected\"},{\"version\":\"6.6.0.1\",\"status\":\"affected\"},{\"version\":\"6.6.1\",\"status\":\"affected\"},{\"version\":\"6.6.3\",\"status\":\"affected\"},{\"version\":\"6.6.4\",\"status\":\"affected\"},{\"version\":\"6.6.5\",\"status\":\"affected\"},{\"version\":\"6.6.5.1\",\"status\":\"affected\"},{\"version\":\"6.6.5.2\",\"status\":\"affected\"},{\"version\":\"6.6.7\",\"status\":\"affected\"},{\"version\":\"6.6.7.1\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"status\":\"affected\"},{\"version\":\"6.4.0.1\",\"status\":\"affected\"},{\"version\":\"6.4.0.3\",\"status\":\"affected\"},{\"version\":\"6.4.0.2\",\"status\":\"affected\"},{\"version\":\"6.4.0.4\",\"status\":\"affected\"},{\"version\":\"6.4.0.5\",\"status\":\"affected\"},{\"version\":\"6.4.0.6\",\"status\":\"affected\"},{\"version\":\"6.4.0.7\",\"status\":\"affected\"},{\"version\":\"6.4.0.8\",\"status\":\"affected\"},{\"version\":\"6.4.0.9\",\"status\":\"affected\"},{\"version\":\"6.4.0.10\",\"status\":\"affected\"},{\"version\":\"6.4.0.11\",\"status\":\"affected\"},{\"version\":\"6.4.0.12\",\"status\":\"affected\"},{\"version\":\"6.4.0.13\",\"status\":\"affected\"},{\"version\":\"6.4.0.14\",\"status\":\"affected\"},{\"version\":\"6.4.0.15\",\"status\":\"affected\"},{\"version\":\"6.4.0.16\",\"status\":\"affected\"},{\"version\":\"6.4.0.17\",\"status\":\"affected\"},{\"version\":\"6.7.0\",\"status\":\"affected\"},{\"version\":\"6.7.0.1\",\"status\":\"affected\"},{\"version\":\"6.7.0.2\",\"status\":\"affected\"},{\"version\":\"6.7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"status\":\"affected\"},{\"version\":\"7.0.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1.1\",\"status\":\"affected\"},{\"version\":\"7.0.2\",\"status\":\"affected\"},{\"version\":\"7.0.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.4\",\"status\":\"affected\"},{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"7.0.6\",\"status\":\"affected\"},{\"version\":\"7.0.6.1\",\"status\":\"affected\"},{\"version\":\"7.1.0\",\"status\":\"affected\"},{\"version\":\"7.1.0.1\",\"status\":\"affected\"},{\"version\":\"7.1.0.2\",\"status\":\"affected\"},{\"version\":\"7.1.0.3\",\"status\":\"affected\"},{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.2.0.1\",\"status\":\"affected\"},{\"version\":\"7.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.2.4\",\"status\":\"affected\"},{\"version\":\"7.2.4.1\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"7.2.5.1\",\"status\":\"affected\"},{\"version\":\"7.3.0\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.1\",\"status\":\"affected\"},{\"version\":\"7.4.0\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20353", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20353", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-20353\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-20353（Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者は認証されていないリモートの外部からである必要がある。\n・対象は管理用ウェブサーバーまたは VPN 用ウェブサーバーである。\n・攻撃者は細工した HTTP リクエストを送信できる必要がある。\n・公式の対象表：Cisco / Cisco Adaptive Security Appliance (ASA) Software。影響ありとして記載：9.8.1。影響ありとして記載：9.8.1.5。影響ありとして記載：9.8.1.7。影響ありとして記載：9.8.2。影響ありとして記載：9.8.2.8。影響ありとして記載：9.8.2.14。影響ありとして記載：9.8.2.15。影響ありとして記載：9.8.2.17。影響ありとして記載：9.8.2.20。影響ありとして記載：9.8.2.24。影響ありとして記載：9.8.2.26。影響ありとして記載：9.8.2.28。影響ありとして記載：9.8.2.33。影響ありとして記載：9.8.2.35。影響ありとして記載：9.8.2.38。影響ありとして記載：9.8.3.8。影響ありとして記載：9.8.3.11。影響ありとして記載：9.8.3.14。影響ありとして記載：9.8.3.16。影響ありとして記載：9.8.3.18。影響ありとして記載：9.8.3.21。影響ありとして記載：9.8.3。影響ありとして記載：9.8.3.26。影響ありとして記載：9.8.3.29。影響ありとして記載：9.8.4。影響ありとして記載：9.8.4.3。影響ありとして記載：9.8.4.7。影響ありとして記載：9.8.4.8。影響ありとして記載：9.8.4.10。影響ありとして記載：9.8.4.12。影響ありとして記載：9.8.4.15。影響ありとして記載：9.8.4.17。影響ありとして記載：9.8.4.25。影響ありとして記載：9.8.4.20。影響ありとして記載：9.8.4.22。影響ありとして記載：9.8.4.26。影響ありとして記載：9.8.4.29。影響ありとして記載：9.8.4.32。影響ありとして記載：9.8.4.33。影響ありとして記載：9.8.4.34。影響ありとして記載：9.8.4.35。影響ありとして記載：9.8.4.39。影響ありとして記載：9.8.4.40。影響ありとして記載：9.8.4.41。影響ありとして記載：9.8.4.43。影響ありとして記載：9.8.4.44。影響ありとして記載：9.8.4.45。影響ありとして記載：9.8.4.46。影響ありとして記載：9.8.4.48。影響ありとして記載：9.12.1。影響ありとして記載：9.12.1.2。影響ありとして記載：9.12.1.3。影響ありとして記載：9.12.2。影響ありとして記載：9.12.2.4。影響ありとして記載：9.12.2.5。影響ありとして記載：9.12.2.9。影響ありとして記載：9.12.3。影響ありとして記載：9.12.3.2。影響ありとして記載：9.12.3.7。影響ありとして記載：9.12.4。影響ありとして記載：9.12.3.12。影響ありとして記載：9.12.3.9。影響ありとして記載：9.12.2.1。影響ありとして記載：9.12.4.2。影響ありとして記載：9.12.4.4。影響ありとして記載：9.12.4.7。影響ありとして記載：9.12.4.10。影響ありとして記載：9.12.4.13。影響ありとして記載：9.12.4.8。影響ありとして記載：9.12.4.18。影響ありとして記載：9.12.4.24。影響ありとして記載：9.12.4.26。影響ありとして記載：9.12.4.29。影響ありとして記載：9.12.4.30。影響ありとして記載：9.12.4.35。影響ありとして記載：9.12.4.37。影響ありとして記載：9.12.4.38。影響ありとして記載：9.12.4.39。影響ありとして記載：9.12.4.40。影響ありとして記載：9.12.4.41。影響ありとして記載：9.12.4.47。影響ありとして記載：9.12.4.48。影響ありとして記載：9.12.4.50。影響ありとして記載：9.12.4.52。影響ありとして記載：9.12.4.54。影響ありとして記載：9.12.4.55。影響ありとして記載：9.12.4.56。影響ありとして記載：9.12.4.58。影響ありとして記載：9.12.4.62。影響ありとして記載：9.12.4.65。影響ありとして記載：9.14.1。影響ありとして記載：9.14.1.10。影響ありとして記載：9.14.1.6。影響ありとして記載：9.14.1.15。影響ありとして記載：9.14.1.19。影響ありとして記載：9.14.1.30。影響ありとして記載：9.14.2。影響ありとして記載：9.14.2.4。影響ありとして記載：9.14.2.8。影響ありとして記載：9.14.2.13。影響ありとして記載：9.14.2.15。影響ありとして記載：9.14.3。影響ありとして記載：9.14.3.1。影響ありとして記載：9.14.3.9。影響ありとして記載：9.14.3.11。影響ありとして記載：9.14.3.13。影響ありとして記載：9.14.3.18。影響ありとして記載：9.14.3.15。影響ありとして記載：9.14.4。影響ありとして記載：9.14.4.6。影響ありとして記載：9.14.4.7。影響ありとして記載：9.14.4.12。影響ありとして記載：9.14.4.13。影響ありとして記載：9.14.4.14。影響ありとして記載：9.14.4.15。影響ありとして記載：9.14.4.17。影響ありとして記載：9.14.4.22。影響ありとして記載：9.14.4.23。影響ありとして記載：9.15.1。影響ありとして記載：9.15.1.7。影響ありとして記載：9.15.1.10。影響ありとして記載：9.15.1.15。影響ありとして記載：9.15.1.16。影響ありとして記載：9.15.1.17。影響ありとして記載：9.15.1.1。影響ありとして記載：9.15.1.21。影響ありとして記載：9.16.1。影響ありとして記載：9.16.1.28。影響ありとして記載：9.16.2。影響ありとして記載：9.16.2.3。影響ありとして記載：9.16.2.7。影響ありとして記載：9.16.2.11。影響ありとして記載：9.16.2.13。影響ありとして記載：9.16.2.14。影響ありとして記載：9.16.3。影響ありとして記載：9.16.3.3。影響ありとして記載：9.16.3.14。影響ありとして記載：9.16.3.15。影響ありとして記載：9.16.3.19。影響ありとして記載：9.16.3.23。影響ありとして記載：9.16.4。影響ありとして記載：9.16.4.9。影響ありとして記載：9.16.4.14。影響ありとして記載：9.16.4.18。影響ありとして記載：9.16.4.19。影響ありとして記載：9.16.4.27。影響ありとして記載：9.16.4.38。影響ありとして記載：9.16.4.39。影響ありとして記載：9.16.4.42。影響ありとして記載：9.16.4.48。影響ありとして記載：9.16.4.55。影響ありとして記載：9.17.1。影響ありとして記載：9.17.1.7。影響ありとして記載：9.17.1.9。影響ありとして記載：9.17.1.10。影響ありとして記載：9.17.1.11。影響ありとして記載：9.17.1.13。影響ありとして記載：9.17.1.15。影響ありとして記載：9.17.1.20。影響ありとして記載：9.17.1.30。影響ありとして記載：9.17.1.33。影響ありとして記載：9.18.1。影響ありとして記載：9.18.1.3。影響ありとして記載：9.18.2。影響ありとして記載：9.18.2.5。影響ありとして記載：9.18.2.7。影響ありとして記載：9.18.2.8。影響ありとして記載：9.18.3。影響ありとして記載：9.18.3.39。影響ありとして記載：9.18.3.46。影響ありとして記載：9.18.3.53。影響ありとして記載：9.18.3.55。影響ありとして記載：9.18.3.56。影響ありとして記載：9.18.4。影響ありとして記載：9.18.4.5。影響ありとして記載：9.18.4.8。影響ありとして記載：9.19.1。影響ありとして記載：9.19.1.5。影響ありとして記載：9.19.1.9。影響ありとして記載：9.19.1.12。影響ありとして記載：9.19.1.18。影響ありとして記載：9.19.1.22。影響ありとして記載：9.19.1.24。影響ありとして記載：9.19.1.27。影響ありとして記載：9.20.1。影響ありとして記載：9.20.1.5。影響ありとして記載：9.20.2。\n・公式の対象表：Cisco / Cisco Firepower Threat Defense Software。影響ありとして記載：6.2.3。影響ありとして記載：6.2.3.1。影響ありとして記載：6.2.3.2。影響ありとして記載：6.2.3.3。影響ありとして記載：6.2.3.4。影響ありとして記載：6.2.3.5。影響ありとして記載：6.2.3.6。影響ありとして記載：6.2.3.7。影響ありとして記載：6.2.3.8。影響ありとして記載：6.2.3.10。影響ありとして記載：6.2.3.11。影響ありとして記載：6.2.3.9。影響ありとして記載：6.2.3.12。影響ありとして記載：6.2.3.13。影響ありとして記載：6.2.3.14。影響ありとして記載：6.2.3.15。影響ありとして記載：6.2.3.16。影響ありとして記載：6.2.3.17。影響ありとして記載：6.2.3.18。影響ありとして記載：6.6.0。影響ありとして記載：6.6.0.1。影響ありとして記載：6.6.1。影響ありとして記載：6.6.3。影響ありとして記載：6.6.4。影響ありとして記載：6.6.5。影響ありとして記載：6.6.5.1。影響ありとして記載：6.6.5.2。影響ありとして記載：6.6.7。影響ありとして記載：6.6.7.1。影響ありとして記載：6.4.0。影響ありとして記載：6.4.0.1。影響ありとして記載：6.4.0.3。影響ありとして記載：6.4.0.2。影響ありとして記載：6.4.0.4。影響ありとして記載：6.4.0.5。影響ありとして記載：6.4.0.6。影響ありとして記載：6.4.0.7。影響ありとして記載：6.4.0.8。影響ありとして記載：6.4.0.9。影響ありとして記載：6.4.0.10。影響ありとして記載：6.4.0.11。影響ありとして記載：6.4.0.12。影響ありとして記載：6.4.0.13。影響ありとして記載：6.4.0.14。影響ありとして記載：6.4.0.15。影響ありとして記載：6.4.0.16。影響ありとして記載：6.4.0.17。影響ありとして記載：6.7.0。影響ありとして記載：6.7.0.1。影響ありとして記載：6.7.0.2。影響ありとして記載：6.7.0.3。影響ありとして記載：7.0.0。影響ありとして記載：7.0.0.1。影響ありとして記載：7.0.1。影響ありとして記載：7.0.1.1。影響ありとして記載：7.0.2。影響ありとして記載：7.0.2.1。影響ありとして記載：7.0.3。影響ありとして記載：7.0.4。影響ありとして記載：7.0.5。影響ありとして記載：7.0.6。影響ありとして記載：7.0.6.1。影響ありとして記載：7.1.0。影響ありとして記載：7.1.0.1。影響ありとして記載：7.1.0.2。影響ありとして記載：7.1.0.3。影響ありとして記載：7.2.0。影響ありとして記載：7.2.0.1。影響ありとして記載：7.2.1。影響ありとして記載：7.2.2。影響ありとして記載：7.2.3。影響ありとして記載：7.2.4。影響ありとして記載：7.2.4.1。影響ありとして記載：7.2.5。影響ありとして記載：7.2.5.1。影響ありとして記載：7.3.0。影響ありとして記載：7.3.1。影響ありとして記載：7.3.1.1。影響ありとして記載：7.4.0。影響ありとして記載：7.4.1。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-20353", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:17:46.699Z", "lastSuccess": "2026-10-24T05:17:46.699Z", "sourceCheckedAt": "2026-10-24T05:17:46.699Z", "errorCode": null }, "glossary": [ { "term": "サービス拒否（DoS）", "meaning": "サービスや機能が停止したり、処理が遅くなったりして、通常どおり利用できなくなることです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/400.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-20359", "aliases": [], "title": "Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software：コード実行", "summary": "Cisco Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Firepower Threat Defense (FTD) ソフトウェアに残っている、VPN クライアントやプラグインの事前読み込みを可能にする古い機能に脆弱性があり、認証済みのローカル攻撃者がルート権限で任意のコードを実行できる可能性があります。攻撃を実行するには管理者レベルの権限が必要です。この脆弱性は、システムフラッシュメモリからファイルを読み込む際の検証不備が原因で、攻撃者が細工したファイルをデバイスの disk0: ファイルシステムにコピーすると、次回のリロード後にそのコードが実行され、システムの動作が変更される恐れがあります。コードが再起動後も残存するため、影響の評価が中から高へ引き上げられました。", "risk": "攻撃が成功すると、ルート権限で任意のコードが実行され、デバイスのシステム動作が変更される可能性があります。", "product": "Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software", "category": "other", "component": "package", "severity": "medium", "cvss": 6, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "affected": [ { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.1.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.1.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.20" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.24" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.28" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.33" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.35" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.2.38" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.16" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.21" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.3.29" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.25" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.20" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.22" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.29" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.32" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.33" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.34" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.35" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.40" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.41" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.43" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.44" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.45" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.46" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.8.4.48" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.1.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.1.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.3.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.2.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.24" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.26" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.29" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.30" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.35" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.37" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.38" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.40" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.41" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.47" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.48" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.50" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.52" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.54" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.55" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.56" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.58" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.62" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.12.4.65" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.6" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.19" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.1.30" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.2.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.3.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.6" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.22" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.14.4.23" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.16" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.17" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.15.1.21" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.1.28" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.2.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.19" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.3.23" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.14" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.19" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.27" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.38" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.42" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.48" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.16.4.55" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.10" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.11" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.13" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.15" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.20" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.30" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.17.1.33" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.1.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2.7" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.2.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.39" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.46" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.53" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.55" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.3.56" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.4" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.4.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.18.4.8" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.9" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.12" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.18" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.22" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.24" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.19.1.27" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.20.1" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.20.1.5" }, { "product": "Cisco Adaptive Security Appliance (ASA) Software", "range": "9.20.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.6" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.7" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.8" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.10" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.11" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.9" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.12" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.13" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.14" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.15" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.16" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.17" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.2.3.18" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.5.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.5.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.7" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.6.7.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.6" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.7" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.8" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.9" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.10" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.11" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.12" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.13" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.14" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.15" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.16" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.4.0.17" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "6.7.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.1.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.2.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.6" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.0.6.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.1.0.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.0.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.2" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.3" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.4" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.4.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.5" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.2.5.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.3.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.3.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.3.1.1" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.4.0" }, { "product": "Cisco Firepower Threat Defense Software", "range": "7.4.1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20359", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-20359", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20359", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-04-24T18:16:49.769Z", "modifiedAt": "2025-10-21T23:05:20.462Z", "fetchedAt": "2026-10-24T05:17:49.505Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this vulnerability.\r\n\r This vulnerability is due to improper validation of a file when it is read from system flash memory. An attacker could exploit this vulnerability by copying a crafted file to the disk0: file system of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the affected device after the next reload of the device, which could alter system behavior. Because the injected code could persist across device reboots, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "Cisco Adaptive Security Appliance (ASA) Software", "versions": [ { "version": "9.8.1", "status": "affected" }, { "version": "9.8.1.5", "status": "affected" }, { "version": "9.8.1.7", "status": "affected" }, { "version": "9.8.2", "status": "affected" }, { "version": "9.8.2.8", "status": "affected" }, { "version": "9.8.2.14", "status": "affected" }, { "version": "9.8.2.15", "status": "affected" }, { "version": "9.8.2.17", "status": "affected" }, { "version": "9.8.2.20", "status": "affected" }, { "version": "9.8.2.24", "status": "affected" }, { "version": "9.8.2.26", "status": "affected" }, { "version": "9.8.2.28", "status": "affected" }, { "version": "9.8.2.33", "status": "affected" }, { "version": "9.8.2.35", "status": "affected" }, { "version": "9.8.2.38", "status": "affected" }, { "version": "9.8.3.8", "status": "affected" }, { "version": "9.8.3.11", "status": "affected" }, { "version": "9.8.3.14", "status": "affected" }, { "version": "9.8.3.16", "status": "affected" }, { "version": "9.8.3.18", "status": "affected" }, { "version": "9.8.3.21", "status": "affected" }, { "version": "9.8.3", "status": "affected" }, { "version": "9.8.3.26", "status": "affected" }, { "version": "9.8.3.29", "status": "affected" }, { "version": "9.8.4", "status": "affected" }, { "version": "9.8.4.3", "status": "affected" }, { "version": "9.8.4.7", "status": "affected" }, { "version": "9.8.4.8", "status": "affected" }, { "version": "9.8.4.10", "status": "affected" }, { "version": "9.8.4.12", "status": "affected" }, { "version": "9.8.4.15", "status": "affected" }, { "version": "9.8.4.17", "status": "affected" }, { "version": "9.8.4.25", "status": "affected" }, { "version": "9.8.4.20", "status": "affected" }, { "version": "9.8.4.22", "status": "affected" }, { "version": "9.8.4.26", "status": "affected" }, { "version": "9.8.4.29", "status": "affected" }, { "version": "9.8.4.32", "status": "affected" }, { "version": "9.8.4.33", "status": "affected" }, { "version": "9.8.4.34", "status": "affected" }, { "version": "9.8.4.35", "status": "affected" }, { "version": "9.8.4.39", "status": "affected" }, { "version": "9.8.4.40", "status": "affected" }, { "version": "9.8.4.41", "status": "affected" }, { "version": "9.8.4.43", "status": "affected" }, { "version": "9.8.4.44", "status": "affected" }, { "version": "9.8.4.45", "status": "affected" }, { "version": "9.8.4.46", "status": "affected" }, { "version": "9.8.4.48", "status": "affected" }, { "version": "9.12.1", "status": "affected" }, { "version": "9.12.1.2", "status": "affected" }, { "version": "9.12.1.3", "status": "affected" }, { "version": "9.12.2", "status": "affected" }, { "version": "9.12.2.4", "status": "affected" }, { "version": "9.12.2.5", "status": "affected" }, { "version": "9.12.2.9", "status": "affected" }, { "version": "9.12.3", "status": "affected" }, { "version": "9.12.3.2", "status": "affected" }, { "version": "9.12.3.7", "status": "affected" }, { "version": "9.12.4", "status": "affected" }, { "version": "9.12.3.12", "status": "affected" }, { "version": "9.12.3.9", "status": "affected" }, { "version": "9.12.2.1", "status": "affected" }, { "version": "9.12.4.2", "status": "affected" }, { "version": "9.12.4.4", "status": "affected" }, { "version": "9.12.4.7", "status": "affected" }, { "version": "9.12.4.10", "status": "affected" }, { "version": "9.12.4.13", "status": "affected" }, { "version": "9.12.4.8", "status": "affected" }, { "version": "9.12.4.18", "status": "affected" }, { "version": "9.12.4.24", "status": "affected" }, { "version": "9.12.4.26", "status": "affected" }, { "version": "9.12.4.29", "status": "affected" }, { "version": "9.12.4.30", "status": "affected" }, { "version": "9.12.4.35", "status": "affected" }, { "version": "9.12.4.37", "status": "affected" }, { "version": "9.12.4.38", "status": "affected" }, { "version": "9.12.4.39", "status": "affected" }, { "version": "9.12.4.40", "status": "affected" }, { "version": "9.12.4.41", "status": "affected" }, { "version": "9.12.4.47", "status": "affected" }, { "version": "9.12.4.48", "status": "affected" }, { "version": "9.12.4.50", "status": "affected" }, { "version": "9.12.4.52", "status": "affected" }, { "version": "9.12.4.54", "status": "affected" }, { "version": "9.12.4.55", "status": "affected" }, { "version": "9.12.4.56", "status": "affected" }, { "version": "9.12.4.58", "status": "affected" }, { "version": "9.12.4.62", "status": "affected" }, { "version": "9.12.4.65", "status": "affected" }, { "version": "9.14.1", "status": "affected" }, { "version": "9.14.1.10", "status": "affected" }, { "version": "9.14.1.6", "status": "affected" }, { "version": "9.14.1.15", "status": "affected" }, { "version": "9.14.1.19", "status": "affected" }, { "version": "9.14.1.30", "status": "affected" }, { "version": "9.14.2", "status": "affected" }, { "version": "9.14.2.4", "status": "affected" }, { "version": "9.14.2.8", "status": "affected" }, { "version": "9.14.2.13", "status": "affected" }, { "version": "9.14.2.15", "status": "affected" }, { "version": "9.14.3", "status": "affected" }, { "version": "9.14.3.1", "status": "affected" }, { "version": "9.14.3.9", "status": "affected" }, { "version": "9.14.3.11", "status": "affected" }, { "version": "9.14.3.13", "status": "affected" }, { "version": "9.14.3.18", "status": "affected" }, { "version": "9.14.3.15", "status": "affected" }, { "version": "9.14.4", "status": "affected" }, { "version": "9.14.4.6", "status": "affected" }, { "version": "9.14.4.7", "status": "affected" }, { "version": "9.14.4.12", "status": "affected" }, { "version": "9.14.4.13", "status": "affected" }, { "version": "9.14.4.14", "status": "affected" }, { "version": "9.14.4.15", "status": "affected" }, { "version": "9.14.4.17", "status": "affected" }, { "version": "9.14.4.22", "status": "affected" }, { "version": "9.14.4.23", "status": "affected" }, { "version": "9.15.1", "status": "affected" }, { "version": "9.15.1.7", "status": "affected" }, { "version": "9.15.1.10", "status": "affected" }, { "version": "9.15.1.15", "status": "affected" }, { "version": "9.15.1.16", "status": "affected" }, { "version": "9.15.1.17", "status": "affected" }, { "version": "9.15.1.1", "status": "affected" }, { "version": "9.15.1.21", "status": "affected" }, { "version": "9.16.1", "status": "affected" }, { "version": "9.16.1.28", "status": "affected" }, { "version": "9.16.2", "status": "affected" }, { "version": "9.16.2.3", "status": "affected" }, { "version": "9.16.2.7", "status": "affected" }, { "version": "9.16.2.11", "status": "affected" }, { "version": "9.16.2.13", "status": "affected" }, { "version": "9.16.2.14", "status": "affected" }, { "version": "9.16.3", "status": "affected" }, { "version": "9.16.3.3", "status": "affected" }, { "version": "9.16.3.14", "status": "affected" }, { "version": "9.16.3.15", "status": "affected" }, { "version": "9.16.3.19", "status": "affected" }, { "version": "9.16.3.23", "status": "affected" }, { "version": "9.16.4", "status": "affected" }, { "version": "9.16.4.9", "status": "affected" }, { "version": "9.16.4.14", "status": "affected" }, { "version": "9.16.4.18", "status": "affected" }, { "version": "9.16.4.19", "status": "affected" }, { "version": "9.16.4.27", "status": "affected" }, { "version": "9.16.4.38", "status": "affected" }, { "version": "9.16.4.39", "status": "affected" }, { "version": "9.16.4.42", "status": "affected" }, { "version": "9.16.4.48", "status": "affected" }, { "version": "9.16.4.55", "status": "affected" }, { "version": "9.17.1", "status": "affected" }, { "version": "9.17.1.7", "status": "affected" }, { "version": "9.17.1.9", "status": "affected" }, { "version": "9.17.1.10", "status": "affected" }, { "version": "9.17.1.11", "status": "affected" }, { "version": "9.17.1.13", "status": "affected" }, { "version": "9.17.1.15", "status": "affected" }, { "version": "9.17.1.20", "status": "affected" }, { "version": "9.17.1.30", "status": "affected" }, { "version": "9.17.1.33", "status": "affected" }, { "version": "9.18.1", "status": "affected" }, { "version": "9.18.1.3", "status": "affected" }, { "version": "9.18.2", "status": "affected" }, { "version": "9.18.2.5", "status": "affected" }, { "version": "9.18.2.7", "status": "affected" }, { "version": "9.18.2.8", "status": "affected" }, { "version": "9.18.3", "status": "affected" }, { "version": "9.18.3.39", "status": "affected" }, { "version": "9.18.3.46", "status": "affected" }, { "version": "9.18.3.53", "status": "affected" }, { "version": "9.18.3.55", "status": "affected" }, { "version": "9.18.3.56", "status": "affected" }, { "version": "9.18.4", "status": "affected" }, { "version": "9.18.4.5", "status": "affected" }, { "version": "9.18.4.8", "status": "affected" }, { "version": "9.19.1", "status": "affected" }, { "version": "9.19.1.5", "status": "affected" }, { "version": "9.19.1.9", "status": "affected" }, { "version": "9.19.1.12", "status": "affected" }, { "version": "9.19.1.18", "status": "affected" }, { "version": "9.19.1.22", "status": "affected" }, { "version": "9.19.1.24", "status": "affected" }, { "version": "9.19.1.27", "status": "affected" }, { "version": "9.20.1", "status": "affected" }, { "version": "9.20.1.5", "status": "affected" }, { "version": "9.20.2", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Firepower Threat Defense Software", "versions": [ { "version": "6.2.3", "status": "affected" }, { "version": "6.2.3.1", "status": "affected" }, { "version": "6.2.3.2", "status": "affected" }, { "version": "6.2.3.3", "status": "affected" }, { "version": "6.2.3.4", "status": "affected" }, { "version": "6.2.3.5", "status": "affected" }, { "version": "6.2.3.6", "status": "affected" }, { "version": "6.2.3.7", "status": "affected" }, { "version": "6.2.3.8", "status": "affected" }, { "version": "6.2.3.10", "status": "affected" }, { "version": "6.2.3.11", "status": "affected" }, { "version": "6.2.3.9", "status": "affected" }, { "version": "6.2.3.12", "status": "affected" }, { "version": "6.2.3.13", "status": "affected" }, { "version": "6.2.3.14", "status": "affected" }, { "version": "6.2.3.15", "status": "affected" }, { "version": "6.2.3.16", "status": "affected" }, { "version": "6.2.3.17", "status": "affected" }, { "version": "6.2.3.18", "status": "affected" }, { "version": "6.6.0", "status": "affected" }, { "version": "6.6.0.1", "status": "affected" }, { "version": "6.6.1", "status": "affected" }, { "version": "6.6.3", "status": "affected" }, { "version": "6.6.4", "status": "affected" }, { "version": "6.6.5", "status": "affected" }, { "version": "6.6.5.1", "status": "affected" }, { "version": "6.6.5.2", "status": "affected" }, { "version": "6.6.7", "status": "affected" }, { "version": "6.6.7.1", "status": "affected" }, { "version": "6.4.0", "status": "affected" }, { "version": "6.4.0.1", "status": "affected" }, { "version": "6.4.0.3", "status": "affected" }, { "version": "6.4.0.2", "status": "affected" }, { "version": "6.4.0.4", "status": "affected" }, { "version": "6.4.0.5", "status": "affected" }, { "version": "6.4.0.6", "status": "affected" }, { "version": "6.4.0.7", "status": "affected" }, { "version": "6.4.0.8", "status": "affected" }, { "version": "6.4.0.9", "status": "affected" }, { "version": "6.4.0.10", "status": "affected" }, { "version": "6.4.0.11", "status": "affected" }, { "version": "6.4.0.12", "status": "affected" }, { "version": "6.4.0.13", "status": "affected" }, { "version": "6.4.0.14", "status": "affected" }, { "version": "6.4.0.15", "status": "affected" }, { "version": "6.4.0.16", "status": "affected" }, { "version": "6.4.0.17", "status": "affected" }, { "version": "6.7.0", "status": "affected" }, { "version": "6.7.0.1", "status": "affected" }, { "version": "6.7.0.2", "status": "affected" }, { "version": "6.7.0.3", "status": "affected" }, { "version": "7.0.0", "status": "affected" }, { "version": "7.0.0.1", "status": "affected" }, { "version": "7.0.1", "status": "affected" }, { "version": "7.0.1.1", "status": "affected" }, { "version": "7.0.2", "status": "affected" }, { "version": "7.0.2.1", "status": "affected" }, { "version": "7.0.3", "status": "affected" }, { "version": "7.0.4", "status": "affected" }, { "version": "7.0.5", "status": "affected" }, { "version": "7.0.6", "status": "affected" }, { "version": "7.0.6.1", "status": "affected" }, { "version": "7.1.0", "status": "affected" }, { "version": "7.1.0.1", "status": "affected" }, { "version": "7.1.0.2", "status": "affected" }, { "version": "7.1.0.3", "status": "affected" }, { "version": "7.2.0", "status": "affected" }, { "version": "7.2.0.1", "status": "affected" }, { "version": "7.2.1", "status": "affected" }, { "version": "7.2.2", "status": "affected" }, { "version": "7.2.3", "status": "affected" }, { "version": "7.2.4", "status": "affected" }, { "version": "7.2.4.1", "status": "affected" }, { "version": "7.2.5", "status": "affected" }, { "version": "7.2.5.1", "status": "affected" }, { "version": "7.3.0", "status": "affected" }, { "version": "7.3.1", "status": "affected" }, { "version": "7.3.1.1", "status": "affected" }, { "version": "7.4.0", "status": "affected" }, { "version": "7.4.1", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-20359", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json", "fetchedAt": "2026-10-24T05:17:49.505Z", "publishedAt": "2024-04-24T18:16:49.769Z", "modifiedAt": "2025-10-21T23:05:20.462Z", "state": "published", "provider": "cisco", "title": "", "descriptions": [ { "lang": "en", "value": "A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this vulnerability.\r\n\r This vulnerability is due to improper validation of a file when it is read from system flash memory. An attacker could exploit this vulnerability by copying a crafted file to the disk0: file system of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the affected device after the next reload of the device, which could alter system behavior. Because the injected code could persist across device reboots, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local privilege escalation from Administrator to root.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20359", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Cisco", "product": "Cisco Adaptive Security Appliance (ASA) Software", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "9.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "9.8.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "9.8.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "9.8.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "9.8.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "9.8.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "9.8.2.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "9.8.2.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "9.8.2.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "9.8.2.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "9.8.2.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "9.8.2.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "9.8.2.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "9.8.2.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "9.8.2.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "9.8.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "9.8.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "9.8.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "9.8.3.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "9.8.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "9.8.3.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "9.8.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "9.8.3.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "9.8.3.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "9.8.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "9.8.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "9.8.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "9.8.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "9.8.4.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "9.8.4.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "9.8.4.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "9.8.4.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "9.8.4.25", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "9.8.4.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "9.8.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "9.8.4.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "9.8.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "9.8.4.32", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "9.8.4.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "9.8.4.34", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "9.8.4.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "9.8.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "9.8.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "9.8.4.41", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "9.8.4.43", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "9.8.4.44", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "9.8.4.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "9.8.4.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "9.8.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "9.12.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "9.12.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "9.12.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "9.12.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "9.12.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "9.12.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "9.12.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "9.12.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "9.12.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "9.12.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "9.12.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "9.12.3.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "9.12.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "9.12.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "9.12.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "9.12.4.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "9.12.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "9.12.4.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "9.12.4.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "9.12.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "9.12.4.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "9.12.4.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "9.12.4.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "9.12.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "9.12.4.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "9.12.4.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "9.12.4.37", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "9.12.4.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "9.12.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "9.12.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "9.12.4.41", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "9.12.4.47", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "9.12.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "9.12.4.50", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "9.12.4.52", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "9.12.4.54", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "9.12.4.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "9.12.4.56", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "9.12.4.58", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "9.12.4.62", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "9.12.4.65", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "9.14.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "9.14.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "9.14.1.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "9.14.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "9.14.1.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "9.14.1.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "9.14.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "9.14.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "9.14.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "9.14.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "9.14.2.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "9.14.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "9.14.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "9.14.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "9.14.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "9.14.3.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "9.14.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "9.14.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "9.14.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "9.14.4.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "9.14.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "9.14.4.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "9.14.4.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "9.14.4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "9.14.4.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "9.14.4.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "9.14.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "9.14.4.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "9.15.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "9.15.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "9.15.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "9.15.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "9.15.1.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "9.15.1.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "9.15.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "9.15.1.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "9.16.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "9.16.1.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "9.16.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "9.16.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "9.16.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "9.16.2.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "9.16.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "9.16.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "9.16.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "9.16.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "9.16.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "9.16.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "9.16.3.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "9.16.3.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "9.16.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "9.16.4.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "9.16.4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "9.16.4.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "9.16.4.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "9.16.4.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "9.16.4.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "9.16.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "9.16.4.42", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "9.16.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "9.16.4.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "9.17.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "9.17.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/153", "version": "9.17.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/154", "version": "9.17.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/155", "version": "9.17.1.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/156", "version": "9.17.1.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/157", "version": "9.17.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/158", "version": "9.17.1.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/159", "version": "9.17.1.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/160", "version": "9.17.1.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/161", "version": "9.18.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/162", "version": "9.18.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/163", "version": "9.18.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/164", "version": "9.18.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/165", "version": "9.18.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/166", "version": "9.18.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/167", "version": "9.18.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/168", "version": "9.18.3.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/169", "version": "9.18.3.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/170", "version": "9.18.3.53", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/171", "version": "9.18.3.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/172", "version": "9.18.3.56", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/173", "version": "9.18.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/174", "version": "9.18.4.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/175", "version": "9.18.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/176", "version": "9.19.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/177", "version": "9.19.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/178", "version": "9.19.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/179", "version": "9.19.1.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/180", "version": "9.19.1.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/181", "version": "9.19.1.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/182", "version": "9.19.1.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/183", "version": "9.19.1.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/184", "version": "9.20.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/185", "version": "9.20.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/186", "version": "9.20.2", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Firepower Threat Defense Software", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "6.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "6.2.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "6.2.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "6.2.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/4", "version": "6.2.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/5", "version": "6.2.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/6", "version": "6.2.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/7", "version": "6.2.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/8", "version": "6.2.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/9", "version": "6.2.3.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/10", "version": "6.2.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/11", "version": "6.2.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/12", "version": "6.2.3.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/13", "version": "6.2.3.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/14", "version": "6.2.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/15", "version": "6.2.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/16", "version": "6.2.3.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/17", "version": "6.2.3.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/18", "version": "6.2.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/19", "version": "6.6.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/20", "version": "6.6.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/21", "version": "6.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/22", "version": "6.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/23", "version": "6.6.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/24", "version": "6.6.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/25", "version": "6.6.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/26", "version": "6.6.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/27", "version": "6.6.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/28", "version": "6.6.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/29", "version": "6.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/30", "version": "6.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/31", "version": "6.4.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/32", "version": "6.4.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/33", "version": "6.4.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/34", "version": "6.4.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/35", "version": "6.4.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/36", "version": "6.4.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/37", "version": "6.4.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/38", "version": "6.4.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/39", "version": "6.4.0.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/40", "version": "6.4.0.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/41", "version": "6.4.0.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/42", "version": "6.4.0.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/43", "version": "6.4.0.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/44", "version": "6.4.0.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/45", "version": "6.4.0.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/46", "version": "6.4.0.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/47", "version": "6.7.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/48", "version": "6.7.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/49", "version": "6.7.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/50", "version": "6.7.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/51", "version": "7.0.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/52", "version": "7.0.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/53", "version": "7.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/54", "version": "7.0.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/55", "version": "7.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/56", "version": "7.0.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/57", "version": "7.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/58", "version": "7.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/59", "version": "7.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/60", "version": "7.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/61", "version": "7.0.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/62", "version": "7.1.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/63", "version": "7.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/64", "version": "7.1.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/65", "version": "7.1.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/66", "version": "7.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/67", "version": "7.2.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/68", "version": "7.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/69", "version": "7.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/70", "version": "7.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/71", "version": "7.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/72", "version": "7.2.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/73", "version": "7.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/74", "version": "7.2.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/75", "version": "7.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/76", "version": "7.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/77", "version": "7.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/78", "version": "7.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/79", "version": "7.4.1", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "Cisco has confirmed that this vulnerability has been exploited. Cisco strongly recommends that customers upgrade to fixed software to resolve this vulnerability. Customers are also strongly encouraged to monitor system logs for indicators of undocumented configuration changes, unscheduled reboots, and any anomalous credential activity.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-94", "lang": "en", "description": "Improper Control of Generation of Code ('Code Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "baseScore": 6, "baseSeverity": "MEDIUM", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h", "label": "cisco-sa-asaftd-persist-rce-FLsNXF4h", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20359", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Adaptive Security Appliance (ASA) Software\",\"versions\":[{\"version\":\"9.8.1\",\"status\":\"affected\"},{\"version\":\"9.8.1.5\",\"status\":\"affected\"},{\"version\":\"9.8.1.7\",\"status\":\"affected\"},{\"version\":\"9.8.2\",\"status\":\"affected\"},{\"version\":\"9.8.2.8\",\"status\":\"affected\"},{\"version\":\"9.8.2.14\",\"status\":\"affected\"},{\"version\":\"9.8.2.15\",\"status\":\"affected\"},{\"version\":\"9.8.2.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.20\",\"status\":\"affected\"},{\"version\":\"9.8.2.24\",\"status\":\"affected\"},{\"version\":\"9.8.2.26\",\"status\":\"affected\"},{\"version\":\"9.8.2.28\",\"status\":\"affected\"},{\"version\":\"9.8.2.33\",\"status\":\"affected\"},{\"version\":\"9.8.2.35\",\"status\":\"affected\"},{\"version\":\"9.8.2.38\",\"status\":\"affected\"},{\"version\":\"9.8.3.8\",\"status\":\"affected\"},{\"version\":\"9.8.3.11\",\"status\":\"affected\"},{\"version\":\"9.8.3.14\",\"status\":\"affected\"},{\"version\":\"9.8.3.16\",\"status\":\"affected\"},{\"version\":\"9.8.3.18\",\"status\":\"affected\"},{\"version\":\"9.8.3.21\",\"status\":\"affected\"},{\"version\":\"9.8.3\",\"status\":\"affected\"},{\"version\":\"9.8.3.26\",\"status\":\"affected\"},{\"version\":\"9.8.3.29\",\"status\":\"affected\"},{\"version\":\"9.8.4\",\"status\":\"affected\"},{\"version\":\"9.8.4.3\",\"status\":\"affected\"},{\"version\":\"9.8.4.7\",\"status\":\"affected\"},{\"version\":\"9.8.4.8\",\"status\":\"affected\"},{\"version\":\"9.8.4.10\",\"status\":\"affected\"},{\"version\":\"9.8.4.12\",\"status\":\"affected\"},{\"version\":\"9.8.4.15\",\"status\":\"affected\"},{\"version\":\"9.8.4.17\",\"status\":\"affected\"},{\"version\":\"9.8.4.25\",\"status\":\"affected\"},{\"version\":\"9.8.4.20\",\"status\":\"affected\"},{\"version\":\"9.8.4.22\",\"status\":\"affected\"},{\"version\":\"9.8.4.26\",\"status\":\"affected\"},{\"version\":\"9.8.4.29\",\"status\":\"affected\"},{\"version\":\"9.8.4.32\",\"status\":\"affected\"},{\"version\":\"9.8.4.33\",\"status\":\"affected\"},{\"version\":\"9.8.4.34\",\"status\":\"affected\"},{\"version\":\"9.8.4.35\",\"status\":\"affected\"},{\"version\":\"9.8.4.39\",\"status\":\"affected\"},{\"version\":\"9.8.4.40\",\"status\":\"affected\"},{\"version\":\"9.8.4.41\",\"status\":\"affected\"},{\"version\":\"9.8.4.43\",\"status\":\"affected\"},{\"version\":\"9.8.4.44\",\"status\":\"affected\"},{\"version\":\"9.8.4.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.46\",\"status\":\"affected\"},{\"version\":\"9.8.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.1\",\"status\":\"affected\"},{\"version\":\"9.12.1.2\",\"status\":\"affected\"},{\"version\":\"9.12.1.3\",\"status\":\"affected\"},{\"version\":\"9.12.2\",\"status\":\"affected\"},{\"version\":\"9.12.2.4\",\"status\":\"affected\"},{\"version\":\"9.12.2.5\",\"status\":\"affected\"},{\"version\":\"9.12.2.9\",\"status\":\"affected\"},{\"version\":\"9.12.3\",\"status\":\"affected\"},{\"version\":\"9.12.3.2\",\"status\":\"affected\"},{\"version\":\"9.12.3.7\",\"status\":\"affected\"},{\"version\":\"9.12.4\",\"status\":\"affected\"},{\"version\":\"9.12.3.12\",\"status\":\"affected\"},{\"version\":\"9.12.3.9\",\"status\":\"affected\"},{\"version\":\"9.12.2.1\",\"status\":\"affected\"},{\"version\":\"9.12.4.2\",\"status\":\"affected\"},{\"version\":\"9.12.4.4\",\"status\":\"affected\"},{\"version\":\"9.12.4.7\",\"status\":\"affected\"},{\"version\":\"9.12.4.10\",\"status\":\"affected\"},{\"version\":\"9.12.4.13\",\"status\":\"affected\"},{\"version\":\"9.12.4.8\",\"status\":\"affected\"},{\"version\":\"9.12.4.18\",\"status\":\"affected\"},{\"version\":\"9.12.4.24\",\"status\":\"affected\"},{\"version\":\"9.12.4.26\",\"status\":\"affected\"},{\"version\":\"9.12.4.29\",\"status\":\"affected\"},{\"version\":\"9.12.4.30\",\"status\":\"affected\"},{\"version\":\"9.12.4.35\",\"status\":\"affected\"},{\"version\":\"9.12.4.37\",\"status\":\"affected\"},{\"version\":\"9.12.4.38\",\"status\":\"affected\"},{\"version\":\"9.12.4.39\",\"status\":\"affected\"},{\"version\":\"9.12.4.40\",\"status\":\"affected\"},{\"version\":\"9.12.4.41\",\"status\":\"affected\"},{\"version\":\"9.12.4.47\",\"status\":\"affected\"},{\"version\":\"9.12.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.4.50\",\"status\":\"affected\"},{\"version\":\"9.12.4.52\",\"status\":\"affected\"},{\"version\":\"9.12.4.54\",\"status\":\"affected\"},{\"version\":\"9.12.4.55\",\"status\":\"affected\"},{\"version\":\"9.12.4.56\",\"status\":\"affected\"},{\"version\":\"9.12.4.58\",\"status\":\"affected\"},{\"version\":\"9.12.4.62\",\"status\":\"affected\"},{\"version\":\"9.12.4.65\",\"status\":\"affected\"},{\"version\":\"9.14.1\",\"status\":\"affected\"},{\"version\":\"9.14.1.10\",\"status\":\"affected\"},{\"version\":\"9.14.1.6\",\"status\":\"affected\"},{\"version\":\"9.14.1.15\",\"status\":\"affected\"},{\"version\":\"9.14.1.19\",\"status\":\"affected\"},{\"version\":\"9.14.1.30\",\"status\":\"affected\"},{\"version\":\"9.14.2\",\"status\":\"affected\"},{\"version\":\"9.14.2.4\",\"status\":\"affected\"},{\"version\":\"9.14.2.8\",\"status\":\"affected\"},{\"version\":\"9.14.2.13\",\"status\":\"affected\"},{\"version\":\"9.14.2.15\",\"status\":\"affected\"},{\"version\":\"9.14.3\",\"status\":\"affected\"},{\"version\":\"9.14.3.1\",\"status\":\"affected\"},{\"version\":\"9.14.3.9\",\"status\":\"affected\"},{\"version\":\"9.14.3.11\",\"status\":\"affected\"},{\"version\":\"9.14.3.13\",\"status\":\"affected\"},{\"version\":\"9.14.3.18\",\"status\":\"affected\"},{\"version\":\"9.14.3.15\",\"status\":\"affected\"},{\"version\":\"9.14.4\",\"status\":\"affected\"},{\"version\":\"9.14.4.6\",\"status\":\"affected\"},{\"version\":\"9.14.4.7\",\"status\":\"affected\"},{\"version\":\"9.14.4.12\",\"status\":\"affected\"},{\"version\":\"9.14.4.13\",\"status\":\"affected\"},{\"version\":\"9.14.4.14\",\"status\":\"affected\"},{\"version\":\"9.14.4.15\",\"status\":\"affected\"},{\"version\":\"9.14.4.17\",\"status\":\"affected\"},{\"version\":\"9.14.4.22\",\"status\":\"affected\"},{\"version\":\"9.14.4.23\",\"status\":\"affected\"},{\"version\":\"9.15.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.7\",\"status\":\"affected\"},{\"version\":\"9.15.1.10\",\"status\":\"affected\"},{\"version\":\"9.15.1.15\",\"status\":\"affected\"},{\"version\":\"9.15.1.16\",\"status\":\"affected\"},{\"version\":\"9.15.1.17\",\"status\":\"affected\"},{\"version\":\"9.15.1.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.21\",\"status\":\"affected\"},{\"version\":\"9.16.1\",\"status\":\"affected\"},{\"version\":\"9.16.1.28\",\"status\":\"affected\"},{\"version\":\"9.16.2\",\"status\":\"affected\"},{\"version\":\"9.16.2.3\",\"status\":\"affected\"},{\"version\":\"9.16.2.7\",\"status\":\"affected\"},{\"version\":\"9.16.2.11\",\"status\":\"affected\"},{\"version\":\"9.16.2.13\",\"status\":\"affected\"},{\"version\":\"9.16.2.14\",\"status\":\"affected\"},{\"version\":\"9.16.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.14\",\"status\":\"affected\"},{\"version\":\"9.16.3.15\",\"status\":\"affected\"},{\"version\":\"9.16.3.19\",\"status\":\"affected\"},{\"version\":\"9.16.3.23\",\"status\":\"affected\"},{\"version\":\"9.16.4\",\"status\":\"affected\"},{\"version\":\"9.16.4.9\",\"status\":\"affected\"},{\"version\":\"9.16.4.14\",\"status\":\"affected\"},{\"version\":\"9.16.4.18\",\"status\":\"affected\"},{\"version\":\"9.16.4.19\",\"status\":\"affected\"},{\"version\":\"9.16.4.27\",\"status\":\"affected\"},{\"version\":\"9.16.4.38\",\"status\":\"affected\"},{\"version\":\"9.16.4.39\",\"status\":\"affected\"},{\"version\":\"9.16.4.42\",\"status\":\"affected\"},{\"version\":\"9.16.4.48\",\"status\":\"affected\"},{\"version\":\"9.16.4.55\",\"status\":\"affected\"},{\"version\":\"9.17.1\",\"status\":\"affected\"},{\"version\":\"9.17.1.7\",\"status\":\"affected\"},{\"version\":\"9.17.1.9\",\"status\":\"affected\"},{\"version\":\"9.17.1.10\",\"status\":\"affected\"},{\"version\":\"9.17.1.11\",\"status\":\"affected\"},{\"version\":\"9.17.1.13\",\"status\":\"affected\"},{\"version\":\"9.17.1.15\",\"status\":\"affected\"},{\"version\":\"9.17.1.20\",\"status\":\"affected\"},{\"version\":\"9.17.1.30\",\"status\":\"affected\"},{\"version\":\"9.17.1.33\",\"status\":\"affected\"},{\"version\":\"9.18.1\",\"status\":\"affected\"},{\"version\":\"9.18.1.3\",\"status\":\"affected\"},{\"version\":\"9.18.2\",\"status\":\"affected\"},{\"version\":\"9.18.2.5\",\"status\":\"affected\"},{\"version\":\"9.18.2.7\",\"status\":\"affected\"},{\"version\":\"9.18.2.8\",\"status\":\"affected\"},{\"version\":\"9.18.3\",\"status\":\"affected\"},{\"version\":\"9.18.3.39\",\"status\":\"affected\"},{\"version\":\"9.18.3.46\",\"status\":\"affected\"},{\"version\":\"9.18.3.53\",\"status\":\"affected\"},{\"version\":\"9.18.3.55\",\"status\":\"affected\"},{\"version\":\"9.18.3.56\",\"status\":\"affected\"},{\"version\":\"9.18.4\",\"status\":\"affected\"},{\"version\":\"9.18.4.5\",\"status\":\"affected\"},{\"version\":\"9.18.4.8\",\"status\":\"affected\"},{\"version\":\"9.19.1\",\"status\":\"affected\"},{\"version\":\"9.19.1.5\",\"status\":\"affected\"},{\"version\":\"9.19.1.9\",\"status\":\"affected\"},{\"version\":\"9.19.1.12\",\"status\":\"affected\"},{\"version\":\"9.19.1.18\",\"status\":\"affected\"},{\"version\":\"9.19.1.22\",\"status\":\"affected\"},{\"version\":\"9.19.1.24\",\"status\":\"affected\"},{\"version\":\"9.19.1.27\",\"status\":\"affected\"},{\"version\":\"9.20.1\",\"status\":\"affected\"},{\"version\":\"9.20.1.5\",\"status\":\"affected\"},{\"version\":\"9.20.2\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Firepower Threat Defense Software\",\"versions\":[{\"version\":\"6.2.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.1\",\"status\":\"affected\"},{\"version\":\"6.2.3.2\",\"status\":\"affected\"},{\"version\":\"6.2.3.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.4\",\"status\":\"affected\"},{\"version\":\"6.2.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.3.6\",\"status\":\"affected\"},{\"version\":\"6.2.3.7\",\"status\":\"affected\"},{\"version\":\"6.2.3.8\",\"status\":\"affected\"},{\"version\":\"6.2.3.10\",\"status\":\"affected\"},{\"version\":\"6.2.3.11\",\"status\":\"affected\"},{\"version\":\"6.2.3.9\",\"status\":\"affected\"},{\"version\":\"6.2.3.12\",\"status\":\"affected\"},{\"version\":\"6.2.3.13\",\"status\":\"affected\"},{\"version\":\"6.2.3.14\",\"status\":\"affected\"},{\"version\":\"6.2.3.15\",\"status\":\"affected\"},{\"version\":\"6.2.3.16\",\"status\":\"affected\"},{\"version\":\"6.2.3.17\",\"status\":\"affected\"},{\"version\":\"6.2.3.18\",\"status\":\"affected\"},{\"version\":\"6.6.0\",\"status\":\"affected\"},{\"version\":\"6.6.0.1\",\"status\":\"affected\"},{\"version\":\"6.6.1\",\"status\":\"affected\"},{\"version\":\"6.6.3\",\"status\":\"affected\"},{\"version\":\"6.6.4\",\"status\":\"affected\"},{\"version\":\"6.6.5\",\"status\":\"affected\"},{\"version\":\"6.6.5.1\",\"status\":\"affected\"},{\"version\":\"6.6.5.2\",\"status\":\"affected\"},{\"version\":\"6.6.7\",\"status\":\"affected\"},{\"version\":\"6.6.7.1\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"status\":\"affected\"},{\"version\":\"6.4.0.1\",\"status\":\"affected\"},{\"version\":\"6.4.0.3\",\"status\":\"affected\"},{\"version\":\"6.4.0.2\",\"status\":\"affected\"},{\"version\":\"6.4.0.4\",\"status\":\"affected\"},{\"version\":\"6.4.0.5\",\"status\":\"affected\"},{\"version\":\"6.4.0.6\",\"status\":\"affected\"},{\"version\":\"6.4.0.7\",\"status\":\"affected\"},{\"version\":\"6.4.0.8\",\"status\":\"affected\"},{\"version\":\"6.4.0.9\",\"status\":\"affected\"},{\"version\":\"6.4.0.10\",\"status\":\"affected\"},{\"version\":\"6.4.0.11\",\"status\":\"affected\"},{\"version\":\"6.4.0.12\",\"status\":\"affected\"},{\"version\":\"6.4.0.13\",\"status\":\"affected\"},{\"version\":\"6.4.0.14\",\"status\":\"affected\"},{\"version\":\"6.4.0.15\",\"status\":\"affected\"},{\"version\":\"6.4.0.16\",\"status\":\"affected\"},{\"version\":\"6.4.0.17\",\"status\":\"affected\"},{\"version\":\"6.7.0\",\"status\":\"affected\"},{\"version\":\"6.7.0.1\",\"status\":\"affected\"},{\"version\":\"6.7.0.2\",\"status\":\"affected\"},{\"version\":\"6.7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"status\":\"affected\"},{\"version\":\"7.0.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1.1\",\"status\":\"affected\"},{\"version\":\"7.0.2\",\"status\":\"affected\"},{\"version\":\"7.0.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.4\",\"status\":\"affected\"},{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"7.0.6\",\"status\":\"affected\"},{\"version\":\"7.0.6.1\",\"status\":\"affected\"},{\"version\":\"7.1.0\",\"status\":\"affected\"},{\"version\":\"7.1.0.1\",\"status\":\"affected\"},{\"version\":\"7.1.0.2\",\"status\":\"affected\"},{\"version\":\"7.1.0.3\",\"status\":\"affected\"},{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.2.0.1\",\"status\":\"affected\"},{\"version\":\"7.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.2.4\",\"status\":\"affected\"},{\"version\":\"7.2.4.1\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"7.2.5.1\",\"status\":\"affected\"},{\"version\":\"7.3.0\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.1\",\"status\":\"affected\"},{\"version\":\"7.4.0\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this vulnerability.\r\n\r This vulnerability is due to improper validation of a file when it is read from system flash memory. An attacker could exploit this vulnerability by copying a crafted file to the disk0: file system of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the affected device after the next reload of the device, which could alter system behavior. Because the injected code could persist across device reboots, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "Cisco has confirmed that this vulnerability has been exploited. Cisco strongly recommends that customers upgrade to fixed software to resolve this vulnerability. Customers are also strongly encouraged to monitor system logs for indicators of undocumented configuration changes, unscheduled reboots, and any anomalous credential activity.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Improper Control of Generation of Code ('Code Injection')\",\"type\":\"cwe\",\"cweId\":\"CWE-94\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N\",\"baseScore\":6,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-20359:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20359", "sourcePath": "retained:/originalText", "text": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local privilege escalation from Administrator to root.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-20359:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20359", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20359", "modifiedAt": "2024-04-24T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:20.462Z", "fetchedAt": "2026-10-24T05:17:49.505Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-04-24T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Softwareにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:17:49.505Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "329a5452496284e613a4f2d9a02a0b0ba8784317019c6b571401c11ff86fff78", "sourceModifiedAt": "2025-10-21T23:05:20.462Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Firepower Threat Defense (FTD) ソフトウェアに残っている、VPN クライアントやプラグインの事前読み込みを可能にする古い機能に脆弱性があり、認証済みのローカル攻撃者がルート権限で任意のコードを実行できる可能性があります。攻撃を実行するには管理者レベルの権限が必要です。この脆弱性は、システムフラッシュメモリからファイルを読み込む際の検証不備が原因で、攻撃者が細工したファイルをデバイスの disk0: ファイルシステムにコピーすると、次回のリロード後にそのコードが実行され、システムの動作が変更される恐れがあります。コードが再起動後も残存するため、影響の評価が中から高へ引き上げられました。", "risk": "攻撃が成功すると、ルート権限で任意のコードが実行され、デバイスのシステム動作が変更される可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者は認証済みのローカルユーザーである必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃を実行するには管理者レベルの権限が必要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃者は細工したファイルをデバイスの disk0: ファイルシステムにコピーできる必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json" ], "evidenceIds": [ "E1" ] }, { "text": "細工したファイルが次回のリロード時に読み込まれることが前提です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json" ], "evidenceIds": [ "E1" ] }, { "text": "対象は Cisco Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Firepower Threat Defense (FTD) ソフトウェアのレガシー機能（VPN クライアントやプラグインの事前読み込み）を使用している環境です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Cisco / Cisco Adaptive Security Appliance (ASA) Software。影響ありとして記載：9.8.1。影響ありとして記載：9.8.1.5。影響ありとして記載：9.8.1.7。影響ありとして記載：9.8.2。影響ありとして記載：9.8.2.8。影響ありとして記載：9.8.2.14。影響ありとして記載：9.8.2.15。影響ありとして記載：9.8.2.17。影響ありとして記載：9.8.2.20。影響ありとして記載：9.8.2.24。影響ありとして記載：9.8.2.26。影響ありとして記載：9.8.2.28。影響ありとして記載：9.8.2.33。影響ありとして記載：9.8.2.35。影響ありとして記載：9.8.2.38。影響ありとして記載：9.8.3.8。影響ありとして記載：9.8.3.11。影響ありとして記載：9.8.3.14。影響ありとして記載：9.8.3.16。影響ありとして記載：9.8.3.18。影響ありとして記載：9.8.3.21。影響ありとして記載：9.8.3。影響ありとして記載：9.8.3.26。影響ありとして記載：9.8.3.29。影響ありとして記載：9.8.4。影響ありとして記載：9.8.4.3。影響ありとして記載：9.8.4.7。影響ありとして記載：9.8.4.8。影響ありとして記載：9.8.4.10。影響ありとして記載：9.8.4.12。影響ありとして記載：9.8.4.15。影響ありとして記載：9.8.4.17。影響ありとして記載：9.8.4.25。影響ありとして記載：9.8.4.20。影響ありとして記載：9.8.4.22。影響ありとして記載：9.8.4.26。影響ありとして記載：9.8.4.29。影響ありとして記載：9.8.4.32。影響ありとして記載：9.8.4.33。影響ありとして記載：9.8.4.34。影響ありとして記載：9.8.4.35。影響ありとして記載：9.8.4.39。影響ありとして記載：9.8.4.40。影響ありとして記載：9.8.4.41。影響ありとして記載：9.8.4.43。影響ありとして記載：9.8.4.44。影響ありとして記載：9.8.4.45。影響ありとして記載：9.8.4.46。影響ありとして記載：9.8.4.48。影響ありとして記載：9.12.1。影響ありとして記載：9.12.1.2。影響ありとして記載：9.12.1.3。影響ありとして記載：9.12.2。影響ありとして記載：9.12.2.4。影響ありとして記載：9.12.2.5。影響ありとして記載：9.12.2.9。影響ありとして記載：9.12.3。影響ありとして記載：9.12.3.2。影響ありとして記載：9.12.3.7。影響ありとして記載：9.12.4。影響ありとして記載：9.12.3.12。影響ありとして記載：9.12.3.9。影響ありとして記載：9.12.2.1。影響ありとして記載：9.12.4.2。影響ありとして記載：9.12.4.4。影響ありとして記載：9.12.4.7。影響ありとして記載：9.12.4.10。影響ありとして記載：9.12.4.13。影響ありとして記載：9.12.4.8。影響ありとして記載：9.12.4.18。影響ありとして記載：9.12.4.24。影響ありとして記載：9.12.4.26。影響ありとして記載：9.12.4.29。影響ありとして記載：9.12.4.30。影響ありとして記載：9.12.4.35。影響ありとして記載：9.12.4.37。影響ありとして記載：9.12.4.38。影響ありとして記載：9.12.4.39。影響ありとして記載：9.12.4.40。影響ありとして記載：9.12.4.41。影響ありとして記載：9.12.4.47。影響ありとして記載：9.12.4.48。影響ありとして記載：9.12.4.50。影響ありとして記載：9.12.4.52。影響ありとして記載：9.12.4.54。影響ありとして記載：9.12.4.55。影響ありとして記載：9.12.4.56。影響ありとして記載：9.12.4.58。影響ありとして記載：9.12.4.62。影響ありとして記載：9.12.4.65。影響ありとして記載：9.14.1。影響ありとして記載：9.14.1.10。影響ありとして記載：9.14.1.6。影響ありとして記載：9.14.1.15。影響ありとして記載：9.14.1.19。影響ありとして記載：9.14.1.30。影響ありとして記載：9.14.2。影響ありとして記載：9.14.2.4。影響ありとして記載：9.14.2.8。影響ありとして記載：9.14.2.13。影響ありとして記載：9.14.2.15。影響ありとして記載：9.14.3。影響ありとして記載：9.14.3.1。影響ありとして記載：9.14.3.9。影響ありとして記載：9.14.3.11。影響ありとして記載：9.14.3.13。影響ありとして記載：9.14.3.18。影響ありとして記載：9.14.3.15。影響ありとして記載：9.14.4。影響ありとして記載：9.14.4.6。影響ありとして記載：9.14.4.7。影響ありとして記載：9.14.4.12。影響ありとして記載：9.14.4.13。影響ありとして記載：9.14.4.14。影響ありとして記載：9.14.4.15。影響ありとして記載：9.14.4.17。影響ありとして記載：9.14.4.22。影響ありとして記載：9.14.4.23。影響ありとして記載：9.15.1。影響ありとして記載：9.15.1.7。影響ありとして記載：9.15.1.10。影響ありとして記載：9.15.1.15。影響ありとして記載：9.15.1.16。影響ありとして記載：9.15.1.17。影響ありとして記載：9.15.1.1。影響ありとして記載：9.15.1.21。影響ありとして記載：9.16.1。影響ありとして記載：9.16.1.28。影響ありとして記載：9.16.2。影響ありとして記載：9.16.2.3。影響ありとして記載：9.16.2.7。影響ありとして記載：9.16.2.11。影響ありとして記載：9.16.2.13。影響ありとして記載：9.16.2.14。影響ありとして記載：9.16.3。影響ありとして記載：9.16.3.3。影響ありとして記載：9.16.3.14。影響ありとして記載：9.16.3.15。影響ありとして記載：9.16.3.19。影響ありとして記載：9.16.3.23。影響ありとして記載：9.16.4。影響ありとして記載：9.16.4.9。影響ありとして記載：9.16.4.14。影響ありとして記載：9.16.4.18。影響ありとして記載：9.16.4.19。影響ありとして記載：9.16.4.27。影響ありとして記載：9.16.4.38。影響ありとして記載：9.16.4.39。影響ありとして記載：9.16.4.42。影響ありとして記載：9.16.4.48。影響ありとして記載：9.16.4.55。影響ありとして記載：9.17.1。影響ありとして記載：9.17.1.7。影響ありとして記載：9.17.1.9。影響ありとして記載：9.17.1.10。影響ありとして記載：9.17.1.11。影響ありとして記載：9.17.1.13。影響ありとして記載：9.17.1.15。影響ありとして記載：9.17.1.20。影響ありとして記載：9.17.1.30。影響ありとして記載：9.17.1.33。影響ありとして記載：9.18.1。影響ありとして記載：9.18.1.3。影響ありとして記載：9.18.2。影響ありとして記載：9.18.2.5。影響ありとして記載：9.18.2.7。影響ありとして記載：9.18.2.8。影響ありとして記載：9.18.3。影響ありとして記載：9.18.3.39。影響ありとして記載：9.18.3.46。影響ありとして記載：9.18.3.53。影響ありとして記載：9.18.3.55。影響ありとして記載：9.18.3.56。影響ありとして記載：9.18.4。影響ありとして記載：9.18.4.5。影響ありとして記載：9.18.4.8。影響ありとして記載：9.19.1。影響ありとして記載：9.19.1.5。影響ありとして記載：9.19.1.9。影響ありとして記載：9.19.1.12。影響ありとして記載：9.19.1.18。影響ありとして記載：9.19.1.22。影響ありとして記載：9.19.1.24。影響ありとして記載：9.19.1.27。影響ありとして記載：9.20.1。影響ありとして記載：9.20.1.5。影響ありとして記載：9.20.2。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Cisco / Cisco Firepower Threat Defense Software。影響ありとして記載：6.2.3。影響ありとして記載：6.2.3.1。影響ありとして記載：6.2.3.2。影響ありとして記載：6.2.3.3。影響ありとして記載：6.2.3.4。影響ありとして記載：6.2.3.5。影響ありとして記載：6.2.3.6。影響ありとして記載：6.2.3.7。影響ありとして記載：6.2.3.8。影響ありとして記載：6.2.3.10。影響ありとして記載：6.2.3.11。影響ありとして記載：6.2.3.9。影響ありとして記載：6.2.3.12。影響ありとして記載：6.2.3.13。影響ありとして記載：6.2.3.14。影響ありとして記載：6.2.3.15。影響ありとして記載：6.2.3.16。影響ありとして記載：6.2.3.17。影響ありとして記載：6.2.3.18。影響ありとして記載：6.6.0。影響ありとして記載：6.6.0.1。影響ありとして記載：6.6.1。影響ありとして記載：6.6.3。影響ありとして記載：6.6.4。影響ありとして記載：6.6.5。影響ありとして記載：6.6.5.1。影響ありとして記載：6.6.5.2。影響ありとして記載：6.6.7。影響ありとして記載：6.6.7.1。影響ありとして記載：6.4.0。影響ありとして記載：6.4.0.1。影響ありとして記載：6.4.0.3。影響ありとして記載：6.4.0.2。影響ありとして記載：6.4.0.4。影響ありとして記載：6.4.0.5。影響ありとして記載：6.4.0.6。影響ありとして記載：6.4.0.7。影響ありとして記載：6.4.0.8。影響ありとして記載：6.4.0.9。影響ありとして記載：6.4.0.10。影響ありとして記載：6.4.0.11。影響ありとして記載：6.4.0.12。影響ありとして記載：6.4.0.13。影響ありとして記載：6.4.0.14。影響ありとして記載：6.4.0.15。影響ありとして記載：6.4.0.16。影響ありとして記載：6.4.0.17。影響ありとして記載：6.7.0。影響ありとして記載：6.7.0.1。影響ありとして記載：6.7.0.2。影響ありとして記載：6.7.0.3。影響ありとして記載：7.0.0。影響ありとして記載：7.0.0.1。影響ありとして記載：7.0.1。影響ありとして記載：7.0.1.1。影響ありとして記載：7.0.2。影響ありとして記載：7.0.2.1。影響ありとして記載：7.0.3。影響ありとして記載：7.0.4。影響ありとして記載：7.0.5。影響ありとして記載：7.0.6。影響ありとして記載：7.0.6.1。影響ありとして記載：7.1.0。影響ありとして記載：7.1.0.1。影響ありとして記載：7.1.0.2。影響ありとして記載：7.1.0.3。影響ありとして記載：7.2.0。影響ありとして記載：7.2.0.1。影響ありとして記載：7.2.1。影響ありとして記載：7.2.2。影響ありとして記載：7.2.3。影響ありとして記載：7.2.4。影響ありとして記載：7.2.4.1。影響ありとして記載：7.2.5。影響ありとして記載：7.2.5.1。影響ありとして記載：7.3.0。影響ありとして記載：7.3.1。影響ありとして記載：7.3.1.1。影響ありとして記載：7.4.0。影響ありとして記載：7.4.1。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20359" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-20359", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20359", "https://nvd.nist.gov/vuln/detail/CVE-2024-20359" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-20359", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20359", "https://nvd.nist.gov/vuln/detail/CVE-2024-20359" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-20359", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20359", "https://nvd.nist.gov/vuln/detail/CVE-2024-20359" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20359", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-20359", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20359", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this vulnerability.\r\n\r This vulnerability is due to improper validation of a file when it is read from system flash memory. An attacker could exploit this vulnerability by copying a crafted file to the disk0: file system of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the affected device after the next reload of the device, which could alter system behavior. Because the injected code could persist across device reboots, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Adaptive Security Appliance (ASA) Software\",\"versions\":[{\"version\":\"9.8.1\",\"status\":\"affected\"},{\"version\":\"9.8.1.5\",\"status\":\"affected\"},{\"version\":\"9.8.1.7\",\"status\":\"affected\"},{\"version\":\"9.8.2\",\"status\":\"affected\"},{\"version\":\"9.8.2.8\",\"status\":\"affected\"},{\"version\":\"9.8.2.14\",\"status\":\"affected\"},{\"version\":\"9.8.2.15\",\"status\":\"affected\"},{\"version\":\"9.8.2.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.20\",\"status\":\"affected\"},{\"version\":\"9.8.2.24\",\"status\":\"affected\"},{\"version\":\"9.8.2.26\",\"status\":\"affected\"},{\"version\":\"9.8.2.28\",\"status\":\"affected\"},{\"version\":\"9.8.2.33\",\"status\":\"affected\"},{\"version\":\"9.8.2.35\",\"status\":\"affected\"},{\"version\":\"9.8.2.38\",\"status\":\"affected\"},{\"version\":\"9.8.3.8\",\"status\":\"affected\"},{\"version\":\"9.8.3.11\",\"status\":\"affected\"},{\"version\":\"9.8.3.14\",\"status\":\"affected\"},{\"version\":\"9.8.3.16\",\"status\":\"affected\"},{\"version\":\"9.8.3.18\",\"status\":\"affected\"},{\"version\":\"9.8.3.21\",\"status\":\"affected\"},{\"version\":\"9.8.3\",\"status\":\"affected\"},{\"version\":\"9.8.3.26\",\"status\":\"affected\"},{\"version\":\"9.8.3.29\",\"status\":\"affected\"},{\"version\":\"9.8.4\",\"status\":\"affected\"},{\"version\":\"9.8.4.3\",\"status\":\"affected\"},{\"version\":\"9.8.4.7\",\"status\":\"affected\"},{\"version\":\"9.8.4.8\",\"status\":\"affected\"},{\"version\":\"9.8.4.10\",\"status\":\"affected\"},{\"version\":\"9.8.4.12\",\"status\":\"affected\"},{\"version\":\"9.8.4.15\",\"status\":\"affected\"},{\"version\":\"9.8.4.17\",\"status\":\"affected\"},{\"version\":\"9.8.4.25\",\"status\":\"affected\"},{\"version\":\"9.8.4.20\",\"status\":\"affected\"},{\"version\":\"9.8.4.22\",\"status\":\"affected\"},{\"version\":\"9.8.4.26\",\"status\":\"affected\"},{\"version\":\"9.8.4.29\",\"status\":\"affected\"},{\"version\":\"9.8.4.32\",\"status\":\"affected\"},{\"version\":\"9.8.4.33\",\"status\":\"affected\"},{\"version\":\"9.8.4.34\",\"status\":\"affected\"},{\"version\":\"9.8.4.35\",\"status\":\"affected\"},{\"version\":\"9.8.4.39\",\"status\":\"affected\"},{\"version\":\"9.8.4.40\",\"status\":\"affected\"},{\"version\":\"9.8.4.41\",\"status\":\"affected\"},{\"version\":\"9.8.4.43\",\"status\":\"affected\"},{\"version\":\"9.8.4.44\",\"status\":\"affected\"},{\"version\":\"9.8.4.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.46\",\"status\":\"affected\"},{\"version\":\"9.8.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.1\",\"status\":\"affected\"},{\"version\":\"9.12.1.2\",\"status\":\"affected\"},{\"version\":\"9.12.1.3\",\"status\":\"affected\"},{\"version\":\"9.12.2\",\"status\":\"affected\"},{\"version\":\"9.12.2.4\",\"status\":\"affected\"},{\"version\":\"9.12.2.5\",\"status\":\"affected\"},{\"version\":\"9.12.2.9\",\"status\":\"affected\"},{\"version\":\"9.12.3\",\"status\":\"affected\"},{\"version\":\"9.12.3.2\",\"status\":\"affected\"},{\"version\":\"9.12.3.7\",\"status\":\"affected\"},{\"version\":\"9.12.4\",\"status\":\"affected\"},{\"version\":\"9.12.3.12\",\"status\":\"affected\"},{\"version\":\"9.12.3.9\",\"status\":\"affected\"},{\"version\":\"9.12.2.1\",\"status\":\"affected\"},{\"version\":\"9.12.4.2\",\"status\":\"affected\"},{\"version\":\"9.12.4.4\",\"status\":\"affected\"},{\"version\":\"9.12.4.7\",\"status\":\"affected\"},{\"version\":\"9.12.4.10\",\"status\":\"affected\"},{\"version\":\"9.12.4.13\",\"status\":\"affected\"},{\"version\":\"9.12.4.8\",\"status\":\"affected\"},{\"version\":\"9.12.4.18\",\"status\":\"affected\"},{\"version\":\"9.12.4.24\",\"status\":\"affected\"},{\"version\":\"9.12.4.26\",\"status\":\"affected\"},{\"version\":\"9.12.4.29\",\"status\":\"affected\"},{\"version\":\"9.12.4.30\",\"status\":\"affected\"},{\"version\":\"9.12.4.35\",\"status\":\"affected\"},{\"version\":\"9.12.4.37\",\"status\":\"affected\"},{\"version\":\"9.12.4.38\",\"status\":\"affected\"},{\"version\":\"9.12.4.39\",\"status\":\"affected\"},{\"version\":\"9.12.4.40\",\"status\":\"affected\"},{\"version\":\"9.12.4.41\",\"status\":\"affected\"},{\"version\":\"9.12.4.47\",\"status\":\"affected\"},{\"version\":\"9.12.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.4.50\",\"status\":\"affected\"},{\"version\":\"9.12.4.52\",\"status\":\"affected\"},{\"version\":\"9.12.4.54\",\"status\":\"affected\"},{\"version\":\"9.12.4.55\",\"status\":\"affected\"},{\"version\":\"9.12.4.56\",\"status\":\"affected\"},{\"version\":\"9.12.4.58\",\"status\":\"affected\"},{\"version\":\"9.12.4.62\",\"status\":\"affected\"},{\"version\":\"9.12.4.65\",\"status\":\"affected\"},{\"version\":\"9.14.1\",\"status\":\"affected\"},{\"version\":\"9.14.1.10\",\"status\":\"affected\"},{\"version\":\"9.14.1.6\",\"status\":\"affected\"},{\"version\":\"9.14.1.15\",\"status\":\"affected\"},{\"version\":\"9.14.1.19\",\"status\":\"affected\"},{\"version\":\"9.14.1.30\",\"status\":\"affected\"},{\"version\":\"9.14.2\",\"status\":\"affected\"},{\"version\":\"9.14.2.4\",\"status\":\"affected\"},{\"version\":\"9.14.2.8\",\"status\":\"affected\"},{\"version\":\"9.14.2.13\",\"status\":\"affected\"},{\"version\":\"9.14.2.15\",\"status\":\"affected\"},{\"version\":\"9.14.3\",\"status\":\"affected\"},{\"version\":\"9.14.3.1\",\"status\":\"affected\"},{\"version\":\"9.14.3.9\",\"status\":\"affected\"},{\"version\":\"9.14.3.11\",\"status\":\"affected\"},{\"version\":\"9.14.3.13\",\"status\":\"affected\"},{\"version\":\"9.14.3.18\",\"status\":\"affected\"},{\"version\":\"9.14.3.15\",\"status\":\"affected\"},{\"version\":\"9.14.4\",\"status\":\"affected\"},{\"version\":\"9.14.4.6\",\"status\":\"affected\"},{\"version\":\"9.14.4.7\",\"status\":\"affected\"},{\"version\":\"9.14.4.12\",\"status\":\"affected\"},{\"version\":\"9.14.4.13\",\"status\":\"affected\"},{\"version\":\"9.14.4.14\",\"status\":\"affected\"},{\"version\":\"9.14.4.15\",\"status\":\"affected\"},{\"version\":\"9.14.4.17\",\"status\":\"affected\"},{\"version\":\"9.14.4.22\",\"status\":\"affected\"},{\"version\":\"9.14.4.23\",\"status\":\"affected\"},{\"version\":\"9.15.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.7\",\"status\":\"affected\"},{\"version\":\"9.15.1.10\",\"status\":\"affected\"},{\"version\":\"9.15.1.15\",\"status\":\"affected\"},{\"version\":\"9.15.1.16\",\"status\":\"affected\"},{\"version\":\"9.15.1.17\",\"status\":\"affected\"},{\"version\":\"9.15.1.1\",\"status\":\"affected\"},{\"version\":\"9.15.1.21\",\"status\":\"affected\"},{\"version\":\"9.16.1\",\"status\":\"affected\"},{\"version\":\"9.16.1.28\",\"status\":\"affected\"},{\"version\":\"9.16.2\",\"status\":\"affected\"},{\"version\":\"9.16.2.3\",\"status\":\"affected\"},{\"version\":\"9.16.2.7\",\"status\":\"affected\"},{\"version\":\"9.16.2.11\",\"status\":\"affected\"},{\"version\":\"9.16.2.13\",\"status\":\"affected\"},{\"version\":\"9.16.2.14\",\"status\":\"affected\"},{\"version\":\"9.16.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.14\",\"status\":\"affected\"},{\"version\":\"9.16.3.15\",\"status\":\"affected\"},{\"version\":\"9.16.3.19\",\"status\":\"affected\"},{\"version\":\"9.16.3.23\",\"status\":\"affected\"},{\"version\":\"9.16.4\",\"status\":\"affected\"},{\"version\":\"9.16.4.9\",\"status\":\"affected\"},{\"version\":\"9.16.4.14\",\"status\":\"affected\"},{\"version\":\"9.16.4.18\",\"status\":\"affected\"},{\"version\":\"9.16.4.19\",\"status\":\"affected\"},{\"version\":\"9.16.4.27\",\"status\":\"affected\"},{\"version\":\"9.16.4.38\",\"status\":\"affected\"},{\"version\":\"9.16.4.39\",\"status\":\"affected\"},{\"version\":\"9.16.4.42\",\"status\":\"affected\"},{\"version\":\"9.16.4.48\",\"status\":\"affected\"},{\"version\":\"9.16.4.55\",\"status\":\"affected\"},{\"version\":\"9.17.1\",\"status\":\"affected\"},{\"version\":\"9.17.1.7\",\"status\":\"affected\"},{\"version\":\"9.17.1.9\",\"status\":\"affected\"},{\"version\":\"9.17.1.10\",\"status\":\"affected\"},{\"version\":\"9.17.1.11\",\"status\":\"affected\"},{\"version\":\"9.17.1.13\",\"status\":\"affected\"},{\"version\":\"9.17.1.15\",\"status\":\"affected\"},{\"version\":\"9.17.1.20\",\"status\":\"affected\"},{\"version\":\"9.17.1.30\",\"status\":\"affected\"},{\"version\":\"9.17.1.33\",\"status\":\"affected\"},{\"version\":\"9.18.1\",\"status\":\"affected\"},{\"version\":\"9.18.1.3\",\"status\":\"affected\"},{\"version\":\"9.18.2\",\"status\":\"affected\"},{\"version\":\"9.18.2.5\",\"status\":\"affected\"},{\"version\":\"9.18.2.7\",\"status\":\"affected\"},{\"version\":\"9.18.2.8\",\"status\":\"affected\"},{\"version\":\"9.18.3\",\"status\":\"affected\"},{\"version\":\"9.18.3.39\",\"status\":\"affected\"},{\"version\":\"9.18.3.46\",\"status\":\"affected\"},{\"version\":\"9.18.3.53\",\"status\":\"affected\"},{\"version\":\"9.18.3.55\",\"status\":\"affected\"},{\"version\":\"9.18.3.56\",\"status\":\"affected\"},{\"version\":\"9.18.4\",\"status\":\"affected\"},{\"version\":\"9.18.4.5\",\"status\":\"affected\"},{\"version\":\"9.18.4.8\",\"status\":\"affected\"},{\"version\":\"9.19.1\",\"status\":\"affected\"},{\"version\":\"9.19.1.5\",\"status\":\"affected\"},{\"version\":\"9.19.1.9\",\"status\":\"affected\"},{\"version\":\"9.19.1.12\",\"status\":\"affected\"},{\"version\":\"9.19.1.18\",\"status\":\"affected\"},{\"version\":\"9.19.1.22\",\"status\":\"affected\"},{\"version\":\"9.19.1.24\",\"status\":\"affected\"},{\"version\":\"9.19.1.27\",\"status\":\"affected\"},{\"version\":\"9.20.1\",\"status\":\"affected\"},{\"version\":\"9.20.1.5\",\"status\":\"affected\"},{\"version\":\"9.20.2\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20359.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Firepower Threat Defense Software\",\"versions\":[{\"version\":\"6.2.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.1\",\"status\":\"affected\"},{\"version\":\"6.2.3.2\",\"status\":\"affected\"},{\"version\":\"6.2.3.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.4\",\"status\":\"affected\"},{\"version\":\"6.2.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.3.6\",\"status\":\"affected\"},{\"version\":\"6.2.3.7\",\"status\":\"affected\"},{\"version\":\"6.2.3.8\",\"status\":\"affected\"},{\"version\":\"6.2.3.10\",\"status\":\"affected\"},{\"version\":\"6.2.3.11\",\"status\":\"affected\"},{\"version\":\"6.2.3.9\",\"status\":\"affected\"},{\"version\":\"6.2.3.12\",\"status\":\"affected\"},{\"version\":\"6.2.3.13\",\"status\":\"affected\"},{\"version\":\"6.2.3.14\",\"status\":\"affected\"},{\"version\":\"6.2.3.15\",\"status\":\"affected\"},{\"version\":\"6.2.3.16\",\"status\":\"affected\"},{\"version\":\"6.2.3.17\",\"status\":\"affected\"},{\"version\":\"6.2.3.18\",\"status\":\"affected\"},{\"version\":\"6.6.0\",\"status\":\"affected\"},{\"version\":\"6.6.0.1\",\"status\":\"affected\"},{\"version\":\"6.6.1\",\"status\":\"affected\"},{\"version\":\"6.6.3\",\"status\":\"affected\"},{\"version\":\"6.6.4\",\"status\":\"affected\"},{\"version\":\"6.6.5\",\"status\":\"affected\"},{\"version\":\"6.6.5.1\",\"status\":\"affected\"},{\"version\":\"6.6.5.2\",\"status\":\"affected\"},{\"version\":\"6.6.7\",\"status\":\"affected\"},{\"version\":\"6.6.7.1\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"status\":\"affected\"},{\"version\":\"6.4.0.1\",\"status\":\"affected\"},{\"version\":\"6.4.0.3\",\"status\":\"affected\"},{\"version\":\"6.4.0.2\",\"status\":\"affected\"},{\"version\":\"6.4.0.4\",\"status\":\"affected\"},{\"version\":\"6.4.0.5\",\"status\":\"affected\"},{\"version\":\"6.4.0.6\",\"status\":\"affected\"},{\"version\":\"6.4.0.7\",\"status\":\"affected\"},{\"version\":\"6.4.0.8\",\"status\":\"affected\"},{\"version\":\"6.4.0.9\",\"status\":\"affected\"},{\"version\":\"6.4.0.10\",\"status\":\"affected\"},{\"version\":\"6.4.0.11\",\"status\":\"affected\"},{\"version\":\"6.4.0.12\",\"status\":\"affected\"},{\"version\":\"6.4.0.13\",\"status\":\"affected\"},{\"version\":\"6.4.0.14\",\"status\":\"affected\"},{\"version\":\"6.4.0.15\",\"status\":\"affected\"},{\"version\":\"6.4.0.16\",\"status\":\"affected\"},{\"version\":\"6.4.0.17\",\"status\":\"affected\"},{\"version\":\"6.7.0\",\"status\":\"affected\"},{\"version\":\"6.7.0.1\",\"status\":\"affected\"},{\"version\":\"6.7.0.2\",\"status\":\"affected\"},{\"version\":\"6.7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"status\":\"affected\"},{\"version\":\"7.0.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1.1\",\"status\":\"affected\"},{\"version\":\"7.0.2\",\"status\":\"affected\"},{\"version\":\"7.0.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.4\",\"status\":\"affected\"},{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"7.0.6\",\"status\":\"affected\"},{\"version\":\"7.0.6.1\",\"status\":\"affected\"},{\"version\":\"7.1.0\",\"status\":\"affected\"},{\"version\":\"7.1.0.1\",\"status\":\"affected\"},{\"version\":\"7.1.0.2\",\"status\":\"affected\"},{\"version\":\"7.1.0.3\",\"status\":\"affected\"},{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.2.0.1\",\"status\":\"affected\"},{\"version\":\"7.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.2.4\",\"status\":\"affected\"},{\"version\":\"7.2.4.1\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"7.2.5.1\",\"status\":\"affected\"},{\"version\":\"7.3.0\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.1\",\"status\":\"affected\"},{\"version\":\"7.4.0\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20359", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-20359\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-20359（Cisco Adaptive Security Appliance (ASA) Software / Cisco Firepower Threat Defense Software）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者は認証済みのローカルユーザーである必要があります。\n・攻撃を実行するには管理者レベルの権限が必要です。\n・攻撃者は細工したファイルをデバイスの disk0: ファイルシステムにコピーできる必要があります。\n・細工したファイルが次回のリロード時に読み込まれることが前提です。\n・対象は Cisco Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Firepower Threat Defense (FTD) ソフトウェアのレガシー機能（VPN クライアントやプラグインの事前読み込み）を使用している環境です。\n・公式の対象表：Cisco / Cisco Adaptive Security Appliance (ASA) Software。影響ありとして記載：9.8.1。影響ありとして記載：9.8.1.5。影響ありとして記載：9.8.1.7。影響ありとして記載：9.8.2。影響ありとして記載：9.8.2.8。影響ありとして記載：9.8.2.14。影響ありとして記載：9.8.2.15。影響ありとして記載：9.8.2.17。影響ありとして記載：9.8.2.20。影響ありとして記載：9.8.2.24。影響ありとして記載：9.8.2.26。影響ありとして記載：9.8.2.28。影響ありとして記載：9.8.2.33。影響ありとして記載：9.8.2.35。影響ありとして記載：9.8.2.38。影響ありとして記載：9.8.3.8。影響ありとして記載：9.8.3.11。影響ありとして記載：9.8.3.14。影響ありとして記載：9.8.3.16。影響ありとして記載：9.8.3.18。影響ありとして記載：9.8.3.21。影響ありとして記載：9.8.3。影響ありとして記載：9.8.3.26。影響ありとして記載：9.8.3.29。影響ありとして記載：9.8.4。影響ありとして記載：9.8.4.3。影響ありとして記載：9.8.4.7。影響ありとして記載：9.8.4.8。影響ありとして記載：9.8.4.10。影響ありとして記載：9.8.4.12。影響ありとして記載：9.8.4.15。影響ありとして記載：9.8.4.17。影響ありとして記載：9.8.4.25。影響ありとして記載：9.8.4.20。影響ありとして記載：9.8.4.22。影響ありとして記載：9.8.4.26。影響ありとして記載：9.8.4.29。影響ありとして記載：9.8.4.32。影響ありとして記載：9.8.4.33。影響ありとして記載：9.8.4.34。影響ありとして記載：9.8.4.35。影響ありとして記載：9.8.4.39。影響ありとして記載：9.8.4.40。影響ありとして記載：9.8.4.41。影響ありとして記載：9.8.4.43。影響ありとして記載：9.8.4.44。影響ありとして記載：9.8.4.45。影響ありとして記載：9.8.4.46。影響ありとして記載：9.8.4.48。影響ありとして記載：9.12.1。影響ありとして記載：9.12.1.2。影響ありとして記載：9.12.1.3。影響ありとして記載：9.12.2。影響ありとして記載：9.12.2.4。影響ありとして記載：9.12.2.5。影響ありとして記載：9.12.2.9。影響ありとして記載：9.12.3。影響ありとして記載：9.12.3.2。影響ありとして記載：9.12.3.7。影響ありとして記載：9.12.4。影響ありとして記載：9.12.3.12。影響ありとして記載：9.12.3.9。影響ありとして記載：9.12.2.1。影響ありとして記載：9.12.4.2。影響ありとして記載：9.12.4.4。影響ありとして記載：9.12.4.7。影響ありとして記載：9.12.4.10。影響ありとして記載：9.12.4.13。影響ありとして記載：9.12.4.8。影響ありとして記載：9.12.4.18。影響ありとして記載：9.12.4.24。影響ありとして記載：9.12.4.26。影響ありとして記載：9.12.4.29。影響ありとして記載：9.12.4.30。影響ありとして記載：9.12.4.35。影響ありとして記載：9.12.4.37。影響ありとして記載：9.12.4.38。影響ありとして記載：9.12.4.39。影響ありとして記載：9.12.4.40。影響ありとして記載：9.12.4.41。影響ありとして記載：9.12.4.47。影響ありとして記載：9.12.4.48。影響ありとして記載：9.12.4.50。影響ありとして記載：9.12.4.52。影響ありとして記載：9.12.4.54。影響ありとして記載：9.12.4.55。影響ありとして記載：9.12.4.56。影響ありとして記載：9.12.4.58。影響ありとして記載：9.12.4.62。影響ありとして記載：9.12.4.65。影響ありとして記載：9.14.1。影響ありとして記載：9.14.1.10。影響ありとして記載：9.14.1.6。影響ありとして記載：9.14.1.15。影響ありとして記載：9.14.1.19。影響ありとして記載：9.14.1.30。影響ありとして記載：9.14.2。影響ありとして記載：9.14.2.4。影響ありとして記載：9.14.2.8。影響ありとして記載：9.14.2.13。影響ありとして記載：9.14.2.15。影響ありとして記載：9.14.3。影響ありとして記載：9.14.3.1。影響ありとして記載：9.14.3.9。影響ありとして記載：9.14.3.11。影響ありとして記載：9.14.3.13。影響ありとして記載：9.14.3.18。影響ありとして記載：9.14.3.15。影響ありとして記載：9.14.4。影響ありとして記載：9.14.4.6。影響ありとして記載：9.14.4.7。影響ありとして記載：9.14.4.12。影響ありとして記載：9.14.4.13。影響ありとして記載：9.14.4.14。影響ありとして記載：9.14.4.15。影響ありとして記載：9.14.4.17。影響ありとして記載：9.14.4.22。影響ありとして記載：9.14.4.23。影響ありとして記載：9.15.1。影響ありとして記載：9.15.1.7。影響ありとして記載：9.15.1.10。影響ありとして記載：9.15.1.15。影響ありとして記載：9.15.1.16。影響ありとして記載：9.15.1.17。影響ありとして記載：9.15.1.1。影響ありとして記載：9.15.1.21。影響ありとして記載：9.16.1。影響ありとして記載：9.16.1.28。影響ありとして記載：9.16.2。影響ありとして記載：9.16.2.3。影響ありとして記載：9.16.2.7。影響ありとして記載：9.16.2.11。影響ありとして記載：9.16.2.13。影響ありとして記載：9.16.2.14。影響ありとして記載：9.16.3。影響ありとして記載：9.16.3.3。影響ありとして記載：9.16.3.14。影響ありとして記載：9.16.3.15。影響ありとして記載：9.16.3.19。影響ありとして記載：9.16.3.23。影響ありとして記載：9.16.4。影響ありとして記載：9.16.4.9。影響ありとして記載：9.16.4.14。影響ありとして記載：9.16.4.18。影響ありとして記載：9.16.4.19。影響ありとして記載：9.16.4.27。影響ありとして記載：9.16.4.38。影響ありとして記載：9.16.4.39。影響ありとして記載：9.16.4.42。影響ありとして記載：9.16.4.48。影響ありとして記載：9.16.4.55。影響ありとして記載：9.17.1。影響ありとして記載：9.17.1.7。影響ありとして記載：9.17.1.9。影響ありとして記載：9.17.1.10。影響ありとして記載：9.17.1.11。影響ありとして記載：9.17.1.13。影響ありとして記載：9.17.1.15。影響ありとして記載：9.17.1.20。影響ありとして記載：9.17.1.30。影響ありとして記載：9.17.1.33。影響ありとして記載：9.18.1。影響ありとして記載：9.18.1.3。影響ありとして記載：9.18.2。影響ありとして記載：9.18.2.5。影響ありとして記載：9.18.2.7。影響ありとして記載：9.18.2.8。影響ありとして記載：9.18.3。影響ありとして記載：9.18.3.39。影響ありとして記載：9.18.3.46。影響ありとして記載：9.18.3.53。影響ありとして記載：9.18.3.55。影響ありとして記載：9.18.3.56。影響ありとして記載：9.18.4。影響ありとして記載：9.18.4.5。影響ありとして記載：9.18.4.8。影響ありとして記載：9.19.1。影響ありとして記載：9.19.1.5。影響ありとして記載：9.19.1.9。影響ありとして記載：9.19.1.12。影響ありとして記載：9.19.1.18。影響ありとして記載：9.19.1.22。影響ありとして記載：9.19.1.24。影響ありとして記載：9.19.1.27。影響ありとして記載：9.20.1。影響ありとして記載：9.20.1.5。影響ありとして記載：9.20.2。\n・公式の対象表：Cisco / Cisco Firepower Threat Defense Software。影響ありとして記載：6.2.3。影響ありとして記載：6.2.3.1。影響ありとして記載：6.2.3.2。影響ありとして記載：6.2.3.3。影響ありとして記載：6.2.3.4。影響ありとして記載：6.2.3.5。影響ありとして記載：6.2.3.6。影響ありとして記載：6.2.3.7。影響ありとして記載：6.2.3.8。影響ありとして記載：6.2.3.10。影響ありとして記載：6.2.3.11。影響ありとして記載：6.2.3.9。影響ありとして記載：6.2.3.12。影響ありとして記載：6.2.3.13。影響ありとして記載：6.2.3.14。影響ありとして記載：6.2.3.15。影響ありとして記載：6.2.3.16。影響ありとして記載：6.2.3.17。影響ありとして記載：6.2.3.18。影響ありとして記載：6.6.0。影響ありとして記載：6.6.0.1。影響ありとして記載：6.6.1。影響ありとして記載：6.6.3。影響ありとして記載：6.6.4。影響ありとして記載：6.6.5。影響ありとして記載：6.6.5.1。影響ありとして記載：6.6.5.2。影響ありとして記載：6.6.7。影響ありとして記載：6.6.7.1。影響ありとして記載：6.4.0。影響ありとして記載：6.4.0.1。影響ありとして記載：6.4.0.3。影響ありとして記載：6.4.0.2。影響ありとして記載：6.4.0.4。影響ありとして記載：6.4.0.5。影響ありとして記載：6.4.0.6。影響ありとして記載：6.4.0.7。影響ありとして記載：6.4.0.8。影響ありとして記載：6.4.0.9。影響ありとして記載：6.4.0.10。影響ありとして記載：6.4.0.11。影響ありとして記載：6.4.0.12。影響ありとして記載：6.4.0.13。影響ありとして記載：6.4.0.14。影響ありとして記載：6.4.0.15。影響ありとして記載：6.4.0.16。影響ありとして記載：6.4.0.17。影響ありとして記載：6.7.0。影響ありとして記載：6.7.0.1。影響ありとして記載：6.7.0.2。影響ありとして記載：6.7.0.3。影響ありとして記載：7.0.0。影響ありとして記載：7.0.0.1。影響ありとして記載：7.0.1。影響ありとして記載：7.0.1.1。影響ありとして記載：7.0.2。影響ありとして記載：7.0.2.1。影響ありとして記載：7.0.3。影響ありとして記載：7.0.4。影響ありとして記載：7.0.5。影響ありとして記載：7.0.6。影響ありとして記載：7.0.6.1。影響ありとして記載：7.1.0。影響ありとして記載：7.1.0.1。影響ありとして記載：7.1.0.2。影響ありとして記載：7.1.0.3。影響ありとして記載：7.2.0。影響ありとして記載：7.2.0.1。影響ありとして記載：7.2.1。影響ありとして記載：7.2.2。影響ありとして記載：7.2.3。影響ありとして記載：7.2.4。影響ありとして記載：7.2.4.1。影響ありとして記載：7.2.5。影響ありとして記載：7.2.5.1。影響ありとして記載：7.3.0。影響ありとして記載：7.3.1。影響ありとして記載：7.3.1.1。影響ありとして記載：7.4.0。影響ありとして記載：7.4.1。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-20359", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:17:49.505Z", "lastSuccess": "2026-10-24T05:17:49.505Z", "sourceCheckedAt": "2026-10-24T05:17:49.505Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-4040", "aliases": [], "title": "CrushFTP：コード実行", "summary": "CrushFTP のすべてのプラットフォームで、バージョン 10.7.1 未満および 11.1.0 未満に存在するサーバー側テンプレートインジェクション脆弱性により、認証されていないリモート攻撃者が VFS サンドボックス外のファイルを読み取り、認証を回避して管理者権限を取得し、サーバー上でリモートコード実行を行える。", "risk": "攻撃者はサーバー上で任意のコードを実行できる。", "product": "CrushFTP", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "directcyber", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "CrushFTP", "range": ">= 10.0 / < 10.7.1" }, { "product": "CrushFTP", "range": ">= 11.0 / < 11.1.0" }, { "product": "CrushFTP", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "ベンダーの指示に従った緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "「CVE-2024-4040」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json", "label": "CVE：directcyber" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-4040", "label": "CVE公式レコード" }, { "url": "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update", "label": "CVE掲載の参考情報" }, { "url": "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update", "label": "CVE掲載の参考情報" }, { "url": "https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ftp_are_vulnerable/", "label": "CVE掲載の参考情報" }, { "url": "https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/", "label": "CVE掲載の参考情報" }, { "url": "https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/", "label": "CVE掲載の参考情報" }, { "url": "https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-day-enables-complete-server-compromise/", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/airbus-cert/CVE-2024-4040", "label": "CVE掲載の参考情報" }, { "url": "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update&version=34", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4040", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-04-22T19:21:46.408Z", "modifiedAt": "2025-10-21T23:05:20.925Z", "fetchedAt": "2026-10-24T08:12:21.524Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server.", "sourceTitle": "Unauthenticated arbitrary file read and remote code execution in CrushFTP", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "collectionURL": "https://www.crushftp.com/download.html", "defaultStatus": "affected", "product": "CrushFTP", "vendor": "CrushFTP", "versions": [ { "lessThan": "10.7.1", "status": "affected", "version": "10.0", "versionType": "semver" }, { "lessThan": "11.1.0", "status": "affected", "version": "11.0", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-4040", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json", "fetchedAt": "2026-10-24T08:12:21.524Z", "publishedAt": "2024-04-22T19:21:46.408Z", "modifiedAt": "2025-10-21T23:05:20.925Z", "state": "published", "provider": "directcyber", "title": "Unauthenticated arbitrary file read and remote code execution in CrushFTP", "descriptions": [ { "lang": "en", "value": "A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "CrushFTP contains an unspecified sandbox escape vulnerability that allows a remote attacker to escape the CrushFTP virtual file system (VFS).", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "CrushFTP", "product": "CrushFTP", "sourcePath": "/containers/cna/affected/0", "collectionURL": "https://www.crushftp.com/download.html", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0", "lessThan": "10.7.1", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "11.0", "lessThan": "11.1.0", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-1336", "lang": "en", "description": "CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "directcyber", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update", "label": "CVE", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update", "label": "CVE", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ftp_are_vulnerable/", "label": "CVE", "tags": [ "related", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/", "label": "CVE", "tags": [ "media-coverage", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/", "label": "CVE", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-day-enables-complete-server-compromise/", "label": "CVE", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" }, { "url": "https://github.com/airbus-cert/CVE-2024-4040", "label": "CVE", "tags": [ "exploit", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/6" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4040", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"collectionURL\":\"https://www.crushftp.com/download.html\",\"defaultStatus\":\"affected\",\"product\":\"CrushFTP\",\"vendor\":\"CrushFTP\",\"versions\":[{\"lessThan\":\"10.7.1\",\"status\":\"affected\",\"version\":\"10.0\",\"versionType\":\"semver\"},{\"lessThan\":\"11.1.0\",\"status\":\"affected\",\"version\":\"11.0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-1336\",\"description\":\"CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-4040:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040", "sourcePath": "retained:/originalText", "text": "CrushFTP contains an unspecified sandbox escape vulnerability that allows a remote attacker to escape the CrushFTP virtual file system (VFS).", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-4040:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040", "modifiedAt": "2024-04-24T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:20.925Z", "fetchedAt": "2026-10-24T08:12:21.524Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-04-24T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "CrushFTPにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:12:21.524Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "97d49e68c2c42568d5a89cd861fb982f587de045e5e877f5c822ecfcf4c7c2c7", "sourceModifiedAt": "2025-10-21T23:05:20.925Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "CrushFTP のすべてのプラットフォームで、バージョン 10.7.1 未満および 11.1.0 未満に存在するサーバー側テンプレートインジェクション脆弱性により、認証されていないリモート攻撃者が VFS サンドボックス外のファイルを読み取り、認証を回避して管理者権限を取得し、サーバー上でリモートコード実行を行える。", "risk": "攻撃者はサーバー上で任意のコードを実行できる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "認証されていないリモート攻撃者が対象となる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "CrushFTP の全プラットフォームで、バージョン 10.7.1 未満または 11.1.0 未満が対象である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃はサーバー側テンプレートインジェクションを利用し、VFS サンドボックス外のファイルへの読み取り、認証回避、管理者権限取得、リモートコード実行が可能である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：CrushFTP / CrushFTP。影響ありとして記載：10.0以上、10.7.1未満。影響ありとして記載：11.0以上、11.1.0未満。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json" ], "evidenceIds": [ "E3" ] }, { "text": "「CrushFTP」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-4040", "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update", "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update", "https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ftp_are_vulnerable/", "https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/", "https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/", "https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-day-enables-complete-server-compromise/", "https://github.com/airbus-cert/CVE-2024-4040", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040", "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update&version=34", "https://nvd.nist.gov/vuln/detail/CVE-2024-4040" ] } ], "actions": [ { "text": "ベンダーの指示に従った緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2024-4040」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-4040", "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update", "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update", "https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ftp_are_vulnerable/", "https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/", "https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/", "https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-day-enables-complete-server-compromise/", "https://github.com/airbus-cert/CVE-2024-4040", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040", "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update&version=34", "https://nvd.nist.gov/vuln/detail/CVE-2024-4040" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-4040", "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update", "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update", "https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ftp_are_vulnerable/", "https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/", "https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/", "https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-day-enables-complete-server-compromise/", "https://github.com/airbus-cert/CVE-2024-4040", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040", "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update&version=34", "https://nvd.nist.gov/vuln/detail/CVE-2024-4040" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-4040", "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update", "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update", "https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ftp_are_vulnerable/", "https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/", "https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/", "https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-day-enables-complete-server-compromise/", "https://github.com/airbus-cert/CVE-2024-4040", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040", "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update&version=34", "https://nvd.nist.gov/vuln/detail/CVE-2024-4040" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-4040", "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update", "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update", "https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ftp_are_vulnerable/", "https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/", "https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/", "https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-day-enables-complete-server-compromise/", "https://github.com/airbus-cert/CVE-2024-4040", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040", "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update&version=34", "https://nvd.nist.gov/vuln/detail/CVE-2024-4040" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json", "label": "CVE：directcyber" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-4040", "label": "CVE公式レコード" }, { "url": "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update", "label": "CVE掲載の参考情報" }, { "url": "https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update", "label": "CVE掲載の参考情報" }, { "url": "https://www.reddit.com/r/cybersecurity/comments/1c850i2/all_versions_of_crush_ftp_are_vulnerable/", "label": "CVE掲載の参考情報" }, { "url": "https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/", "label": "CVE掲載の参考情報" }, { "url": "https://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/", "label": "CVE掲載の参考情報" }, { "url": "https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-day-enables-complete-server-compromise/", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/airbus-cert/CVE-2024-4040", "label": "CVE掲載の参考情報" }, { "url": "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update&version=34", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4040", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json", "sourceField": "/containers/cna/title", "excerpt": "Unauthenticated arbitrary file read and remote code execution in CrushFTP", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4040.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"collectionURL\":\"https://www.crushftp.com/download.html\",\"defaultStatus\":\"affected\",\"product\":\"CrushFTP\",\"vendor\":\"CrushFTP\",\"versions\":[{\"lessThan\":\"10.7.1\",\"status\":\"affected\",\"version\":\"10.0\",\"versionType\":\"semver\"},{\"lessThan\":\"11.1.0\",\"status\":\"affected\",\"version\":\"11.0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4040", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-4040\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-4040（CrushFTP）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証されていないリモート攻撃者が対象となる。\n・CrushFTP の全プラットフォームで、バージョン 10.7.1 未満または 11.1.0 未満が対象である。\n・攻撃はサーバー側テンプレートインジェクションを利用し、VFS サンドボックス外のファイルへの読み取り、認証回避、管理者権限取得、リモートコード実行が可能である。\n・公式の対象表：CrushFTP / CrushFTP。影響ありとして記載：10.0以上、10.7.1未満。影響ありとして記載：11.0以上、11.1.0未満。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-4040", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:12:21.524Z", "lastSuccess": "2026-10-24T08:12:21.524Z", "sourceCheckedAt": "2026-10-24T08:12:21.524Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2022-38028", "aliases": [], "title": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 21H1 / Windows Server 2022 / Windows 10 Version 20H2 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / W：権限の奪取", "summary": "Windows Print Spooler の特権昇格脆弱性です。", "risk": "攻撃者は JavaScript 制約ファイルを改ざんし、SYSTEM 権限で実行させることができる可能性があります。", "product": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 21H1 / Windows Server 2022 / Windows 10 Version 20H2 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / W", "category": "windows", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "affected": [ { "product": "Windows 10 Version 1809", "range": ">= 10.0.17763.0 / < 10.0.17763.3532（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.0 / < 10.0.17763.3532（環境: ARM64-based Systems）" }, { "product": "Windows Server 2019", "range": ">= 10.0.17763.0 / < 10.0.17763.3532（環境: x64-based Systems）" }, { "product": "Windows Server 2019 (Server Core installation)", "range": ">= 10.0.17763.0 / < 10.0.17763.3532（環境: x64-based Systems）" }, { "product": "Windows 10 Version 21H1", "range": ">= 10.0.0 / < 10.0.19043.2130（環境: x64-based Systems / ARM64-based Systems / 32-bit Systems）" }, { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.1129（環境: x64-based Systems）" }, { "product": "Windows 10 Version 20H2", "range": ">= 10.0.0 / < 10.0.19042.2130（環境: 32-bit Systems / ARM64-based Systems）" }, { "product": "Windows 11 version 21H2", "range": ">= 10.0.0 / < 10.0.22000.1098（環境: x64-based Systems / ARM64-based Systems）" }, { "product": "Windows 10 Version 21H2", "range": ">= 10.0.19043.0 / < 10.0.19044.2130（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 22H2", "range": ">= 10.0.22621.0 / < 10.0.22621.674（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1507", "range": ">= 10.0.10240.0 / < 10.0.10240.19507（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1607", "range": ">= 10.0.14393.0 / < 10.0.14393.5427（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows Server 2016", "range": ">= 10.0.14393.0 / < 10.0.14393.5427（環境: x64-based Systems）" }, { "product": "Windows Server 2016 (Server Core installation)", "range": ">= 10.0.14393.0 / < 10.0.14393.5427（環境: x64-based Systems）" }, { "product": "Windows 8.1", "range": ">= 6.3.0 / < 6.3.9600.20625（環境: 32-bit Systems / x64-based Systems / ARM64-based Systems）" }, { "product": "Windows Server 2012", "range": ">= 6.2.9200.0 / < 6.2.9200.23920（環境: x64-based Systems）" }, { "product": "Windows Server 2012 (Server Core installation)", "range": ">= 6.2.9200.0 / < 6.2.9200.23920（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2", "range": ">= 6.3.9600.0 / < 6.3.9600.20625（環境: x64-based Systems）" }, { "product": "Windows Server 2012 R2 (Server Core installation)", "range": ">= 6.3.9600.0 / < 6.3.9600.20625（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2022-38028」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-38028", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38028", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38028", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2022-10-11T00:00:00.000Z", "modifiedAt": "2026-01-12T21:10:05.111Z", "fetchedAt": "2026-10-24T05:17:58.444Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Windows Print Spooler Elevation of Privilege Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.3532", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.17763.3532", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.3532", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.3532", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H1", "platforms": [ "x64-based Systems", "ARM64-based Systems", "32-bit Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.19043.2130", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.1129", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 20H2", "platforms": [ "32-bit Systems", "ARM64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.19042.2130", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "platforms": [ "x64-based Systems", "ARM64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.22000.1098", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19043.0", "lessThan": "10.0.19044.2130", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.22621.0", "lessThan": "10.0.22621.674", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.10240.0", "lessThan": "10.0.10240.19507", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.5427", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.5427", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.5427", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 8.1", "platforms": [ "32-bit Systems", "x64-based Systems", "ARM64-based Systems" ], "versions": [ { "version": "6.3.0", "lessThan": "6.3.9600.20625", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.2.9200.0", "lessThan": "6.2.9200.23920", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.2.9200.0", "lessThan": "6.2.9200.23920", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.20625", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.20625", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: 32-bit Systems / x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2022-38028", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "fetchedAt": "2026-10-24T05:17:58.444Z", "publishedAt": "2022-10-11T00:00:00.000Z", "modifiedAt": "2026-01-12T21:10:05.111Z", "state": "published", "provider": "microsoft", "title": "Windows Print Spooler Elevation of Privilege Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Windows Print Spooler Elevation of Privilege Vulnerability", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/0", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.3532", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/1", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.0", "lessThan": "10.0.17763.3532", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "sourcePath": "/containers/cna/affected/2", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.3532", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "sourcePath": "/containers/cna/affected/3", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.3532", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H1", "sourcePath": "/containers/cna/affected/4", "platforms": [ "x64-based Systems", "ARM64-based Systems", "32-bit Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.0", "lessThan": "10.0.19043.2130", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/5", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.1129", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 20H2", "sourcePath": "/containers/cna/affected/6", "platforms": [ "32-bit Systems", "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "10.0.0", "lessThan": "10.0.19042.2130", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "sourcePath": "/containers/cna/affected/7", "platforms": [ "x64-based Systems", "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "10.0.0", "lessThan": "10.0.22000.1098", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "sourcePath": "/containers/cna/affected/8", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "10.0.19043.0", "lessThan": "10.0.19044.2130", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "sourcePath": "/containers/cna/affected/9", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "10.0.22621.0", "lessThan": "10.0.22621.674", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "sourcePath": "/containers/cna/affected/10", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "10.0.10240.0", "lessThan": "10.0.10240.19507", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "sourcePath": "/containers/cna/affected/11", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.5427", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "sourcePath": "/containers/cna/affected/12", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.5427", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "sourcePath": "/containers/cna/affected/13", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.5427", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 8.1", "sourcePath": "/containers/cna/affected/14", "platforms": [ "32-bit Systems", "x64-based Systems", "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "6.3.0", "lessThan": "6.3.9600.20625", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012", "sourcePath": "/containers/cna/affected/15", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/15/versions/0", "version": "6.2.9200.0", "lessThan": "6.2.9200.23920", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "sourcePath": "/containers/cna/affected/16", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/16/versions/0", "version": "6.2.9200.0", "lessThan": "6.2.9200.23920", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "sourcePath": "/containers/cna/affected/17", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/17/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.20625", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "sourcePath": "/containers/cna/affected/18", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/18/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.20625", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en-US", "description": "Elevation of Privilege", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38028", "label": "Windows Print Spooler Elevation of Privilege Vulnerability", "tags": [ "vendor-advisory" ], "provider": "microsoft", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-38028", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38028", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.3532\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.3532\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.3532\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.3532\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H1\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19043.2130\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.1129\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 20H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19042.2130\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.22000.1098\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19044.2130\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.674\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.19507\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.5427\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.5427\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.5427\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 8.1\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"6.3.9600.20625\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/15", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.23920\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/16", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.23920\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/17", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.20625\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/affected/18", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.20625\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Windows Print Spooler Elevation of Privilege Vulnerability", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"Elevation of Privilege\",\"lang\":\"en-US\",\"type\":\"Impact\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2022-38028:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028", "sourcePath": "retained:/originalText", "text": "Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2022-38028:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028", "modifiedAt": "2024-04-23T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-01-12T21:10:05.111Z", "fetchedAt": "2026-10-24T05:17:58.444Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-04-23T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 21H1 / Windows Server 2022 / Windows 10 Version 20H2 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / Wに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:17:58.444Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "36895b2420025d391bf0f2ecdaa61484cacf94a27134f8f27d887d9304b421bf", "sourceModifiedAt": "2026-01-12T21:10:05.111Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Windows Print Spooler の特権昇格脆弱性です。", "risk": "攻撃者は JavaScript 制約ファイルを改ざんし、SYSTEM 権限で実行させることができる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.3532未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、10.0.17763.3532未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.3532未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.3532未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H1。影響ありとして記載：10.0.0以上、10.0.19043.2130未満。対象の環境：x64-based Systems、ARM64-based Systems、32-bit Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.1129未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 20H2。影響ありとして記載：10.0.0以上、10.0.19042.2130未満。対象の環境：32-bit Systems、ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.0以上、10.0.22000.1098未満。対象の環境：x64-based Systems、ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19044.2130未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.674未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.19507未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.5427未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.5427未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.5427未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：Microsoft / Windows 8.1。影響ありとして記載：6.3.0以上、6.3.9600.20625未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E18" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、6.2.9200.23920未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E19" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、6.2.9200.23920未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E20" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.20625未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E21" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.20625未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E22" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028" ], "evidenceIds": [ "E24" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E4" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028" ], "evidenceIds": [ "E23" ] }, { "text": "「CVE-2022-38028」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2022-38028", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38028", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028", "https://nvd.nist.gov/vuln/detail/CVE-2022-38028" ] }, { "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2022-38028", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38028", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028", "https://nvd.nist.gov/vuln/detail/CVE-2022-38028" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json" ], "evidenceIds": [ "E4" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-38028", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38028", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38028", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Windows Print Spooler Elevation of Privilege Vulnerability", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/title", "excerpt": "Windows Print Spooler Elevation of Privilege Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028", "sourceField": "retained:/originalText", "excerpt": "Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.3532\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.17763.3532\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.3532\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.3532\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H1\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19043.2130\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.1129\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 20H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.19042.2130\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.22000.1098\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19044.2130\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.674\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.19507\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.5427\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.5427\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.5427\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 8.1\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"6.3.0\",\"lessThan\":\"6.3.9600.20625\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/15", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.23920\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/16", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.2.9200.0\",\"lessThan\":\"6.2.9200.23920\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/17", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.20625\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/38xxx/CVE-2022-38028.json", "sourceField": "/containers/cna/affected/18", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.20625\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E23", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E24", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-38028", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2022-38028\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2022-38028（Windows 10 Version 1809 / Windows Server 2019 / Windows Server 2019 (Server Core installation) / Windows 10 Version 21H1 / Windows Server 2022 / Windows 10 Version 20H2 / Windows 11 version 21H2 / Windows 10 Version 21H2 / Windows 11 version 22H2 / W）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.3532未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.0以上、10.0.17763.3532未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.3532未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.3532未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H1。影響ありとして記載：10.0.0以上、10.0.19043.2130未満。対象の環境：x64-based Systems、ARM64-based Systems、32-bit Systems\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.1129未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 20H2。影響ありとして記載：10.0.0以上、10.0.19042.2130未満。対象の環境：32-bit Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.0以上、10.0.22000.1098未満。対象の環境：x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19044.2130未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.674未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.19507未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.5427未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.5427未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.5427未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 8.1。影響ありとして記載：6.3.0以上、6.3.9600.20625未満。対象の環境：32-bit Systems、x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012。影響ありとして記載：6.2.9200.0以上、6.2.9200.23920未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 (Server Core installation)。影響ありとして記載：6.2.9200.0以上、6.2.9200.23920未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.20625未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.20625未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2022-38028", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:17:58.444Z", "lastSuccess": "2026-10-24T05:17:58.444Z", "sourceCheckedAt": "2026-10-24T05:17:58.444Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-3400", "aliases": [], "title": "PAN-OS / Cloud NGFW / Prisma Access：コード実行", "summary": "GlobalProtect機能における任意ファイル作成の脆弱性により、認証されていない攻撃者がファイアウォール上でルート権限の任意コードを実行できる可能性があります。また、Cloud NGFW、Panoramaアプライアンス、Prisma Accessはこの脆弱性の影響を受けません。", "risk": "攻撃者がこの脆弱性を利用すると、ファイアウォール上でルート権限のコマンドを実行できるようになります。", "product": "PAN-OS / Cloud NGFW / Prisma Access", "category": "other", "component": "package", "severity": "critical", "cvss": 10, "cvssVersion": "3.1", "cvssSource": "palo_alto", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "affected": [ { "product": "PAN-OS", "range": ">= 10.2.0 / < 10.2.9-h1 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 10.2.9-h1から影響なし。版の順序・条件は原文確認）" }, { "product": "PAN-OS", "range": ">= 11.0.0 / < 11.0.4-h1 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 11.0.4-h1から影響なし。版の順序・条件は原文確認）" }, { "product": "PAN-OS", "range": ">= 11.1.0 / < 11.1.2-h3 / 範囲内で状態が変わります（開始時: 影響あり。変更点: 11.1.2-h3から影響なし。版の順序・条件は原文確認）" } ], "fixed": [], "steps": [ "修正済みバージョンのPAN‑OS（10.2.9‑h1、11.0.4‑h1、11.1.2‑h3 以降）へただちにアップグレードすることを強く推奨します。", "「CVE-2024-3400」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "label": "CVE：palo_alto" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-3400", "label": "CVE公式レコード" }, { "url": "https://security.paloaltonetworks.com/CVE-2024-3400", "label": "CISAが示す関連情報" }, { "url": "https://unit42.paloaltonetworks.com/cve-2024-3400/", "label": "CVE掲載の参考情報" }, { "url": "https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/", "label": "CVE掲載の参考情報" }, { "url": "https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3400", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-04-12T07:20:00.707Z", "modifiedAt": "2025-10-21T23:05:21.315Z", "fetchedAt": "2026-10-24T05:18:07.075Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.\n\nCloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.", "sourceTitle": "PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "PAN-OS", "vendor": "Palo Alto Networks", "versions": [ { "status": "unaffected", "version": "9.0.0" }, { "status": "unaffected", "version": "9.1.0" }, { "status": "unaffected", "version": "10.0.0" }, { "status": "unaffected", "version": "10.1.0" }, { "changes": [ { "at": "10.2.9-h1", "status": "unaffected" } ], "lessThan": "10.2.9-h1", "status": "affected", "version": "10.2.0", "versionType": "custom" }, { "changes": [ { "at": "11.0.4-h1", "status": "unaffected" } ], "lessThan": "11.0.4-h1", "status": "affected", "version": "11.0.0", "versionType": "custom" }, { "changes": [ { "at": "11.1.2-h3", "status": "unaffected" } ], "lessThan": "11.1.2-h3", "status": "affected", "version": "11.1.0", "versionType": "custom" } ] }, { "defaultStatus": "unaffected", "product": "Cloud NGFW", "vendor": "Palo Alto Networks", "versions": [ { "status": "unaffected", "version": "All" } ] }, { "defaultStatus": "unaffected", "product": "Prisma Access", "vendor": "Palo Alto Networks", "versions": [ { "status": "unaffected", "version": "All" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-3400", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "fetchedAt": "2026-10-24T05:18:07.075Z", "publishedAt": "2024-04-12T07:20:00.707Z", "modifiedAt": "2025-10-21T23:05:21.315Z", "state": "published", "provider": "palo_alto", "title": "PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect", "descriptions": [ { "lang": "en", "value": "A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.\n\nCloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Palo Alto Networks", "product": "PAN-OS", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "9.0.0", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "9.1.0", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "10.0.0", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "10.1.0", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "10.2.0", "lessThan": "10.2.9-h1", "versionType": "custom", "status": "affected", "changes": [ { "at": "10.2.9-h1", "status": "unaffected" } ] }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "11.0.0", "lessThan": "11.0.4-h1", "versionType": "custom", "status": "affected", "changes": [ { "at": "11.0.4-h1", "status": "unaffected" } ] }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "11.1.0", "lessThan": "11.1.2-h3", "versionType": "custom", "status": "affected", "changes": [ { "at": "11.1.2-h3", "status": "unaffected" } ] } ] }, { "vendor": "Palo Alto Networks", "product": "Cloud NGFW", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "All", "status": "unaffected" } ] }, { "vendor": "Palo Alto Networks", "product": "Prisma Access", "sourcePath": "/containers/cna/affected/2", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "All", "status": "unaffected" } ] } ], "solutions": [ { "lang": "en", "value": "We strongly advise customers to immediately upgrade to a fixed version of PAN-OS to protect their devices even when workarounds and mitigations have been applied.\n\nThis issue is fixed in PAN-OS 10.2.9-h1, PAN-OS 11.0.4-h1, PAN-OS 11.1.2-h3, and in all later PAN-OS versions. Customers who upgrade to these versions will be fully protected.", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [ { "lang": "en", "value": "Recommended Mitigation: Customers with a Threat Prevention subscription can block attacks for this vulnerability using Threat IDs 95187, 95189, and 95191 (available in Applications and Threats content version 8836-8695 and later). Please monitor this advisory and new Threat Prevention content updates for additional Threat Prevention IDs around CVE-2024-3400.\n\nTo apply the Threat IDs, customers must ensure that vulnerability protection has been applied to their GlobalProtect interface to prevent exploitation of this issue on their device. Please see https://live.paloaltonetworks.com/t5/globalprotect-articles/applying-vulnerability-protection-to-globalprotect-interfaces/ta-p/340184 for more information.", "sourcePath": "/containers/cna/workarounds/0/value" } ], "exploits": [ { "lang": "en", "value": "Palo Alto Networks is aware of an increasing number of attacks that leverage the exploitation of this vulnerability. Proof of concepts for this vulnerability have been publicly disclosed by third parties.\n\nMore information about the vulnerability's exploitation in the wild can be found in the Unit 42 threat brief ( https://unit42.paloaltonetworks.com/cve-2024-3400/ ) and the Palo Alto Networks PSIRT blog post ( https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/) .", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-77", "lang": "en", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" }, { "cweId": "CWE-20", "lang": "en", "description": "CWE-20 Improper Input Validation", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "palo_alto", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://security.paloaltonetworks.com/CVE-2024-3400", "label": "CVE", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://unit42.paloaltonetworks.com/cve-2024-3400/", "label": "CVE", "tags": [ "technical-description", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/", "label": "CVE", "tags": [ "technical-description", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/", "label": "CVE", "tags": [ "technical-description", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-3400", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"PAN-OS\",\"vendor\":\"Palo Alto Networks\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"9.0.0\"},{\"status\":\"unaffected\",\"version\":\"9.1.0\"},{\"status\":\"unaffected\",\"version\":\"10.0.0\"},{\"status\":\"unaffected\",\"version\":\"10.1.0\"},{\"changes\":[{\"at\":\"10.2.9-h1\",\"status\":\"unaffected\"}],\"lessThan\":\"10.2.9-h1\",\"status\":\"affected\",\"version\":\"10.2.0\",\"versionType\":\"custom\"},{\"changes\":[{\"at\":\"11.0.4-h1\",\"status\":\"unaffected\"}],\"lessThan\":\"11.0.4-h1\",\"status\":\"affected\",\"version\":\"11.0.0\",\"versionType\":\"custom\"},{\"changes\":[{\"at\":\"11.1.2-h3\",\"status\":\"unaffected\"}],\"lessThan\":\"11.1.2-h3\",\"status\":\"affected\",\"version\":\"11.1.0\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Cloud NGFW\",\"vendor\":\"Palo Alto Networks\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"All\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Prisma Access\",\"vendor\":\"Palo Alto Networks\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"All\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.\n\nCloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "We strongly advise customers to immediately upgrade to a fixed version of PAN-OS to protect their devices even when workarounds and mitigations have been applied.\n\nThis issue is fixed in PAN-OS 10.2.9-h1, PAN-OS 11.0.4-h1, PAN-OS 11.1.2-h3, and in all later PAN-OS versions. Customers who upgrade to these versions will be fully protected.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/workarounds/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourcePath": "/containers/cna/workarounds/0/value", "text": "Recommended Mitigation: Customers with a Threat Prevention subscription can block attacks for this vulnerability using Threat IDs 95187, 95189, and 95191 (available in Applications and Threats content version 8836-8695 and later). Please monitor this advisory and new Threat Prevention content updates for additional Threat Prevention IDs around CVE-2024-3400.\n\nTo apply the Threat IDs, customers must ensure that vulnerability protection has been applied to their GlobalProtect interface to prevent exploitation of this issue on their device. Please see https://live.paloaltonetworks.com/t5/globalprotect-articles/applying-vulnerability-protection-to-globalprotect-interfaces/ta-p/340184 for more information.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "Palo Alto Networks is aware of an increasing number of attacks that leverage the exploitation of this vulnerability. Proof of concepts for this vulnerability have been publicly disclosed by third parties.\n\nMore information about the vulnerability's exploitation in the wild can be found in the Unit 42 threat brief ( https://unit42.paloaltonetworks.com/cve-2024-3400/ ) and the Palo Alto Networks PSIRT blog post ( https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/) .", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-77\",\"description\":\"CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/problemTypes/1/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0", "text": "{\"cweId\":\"CWE-20\",\"description\":\"CWE-20 Improper Input Validation\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"CHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-3400:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400", "sourcePath": "retained:/originalText", "text": "Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-3400:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400", "modifiedAt": "2024-04-12T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:21.315Z", "fetchedAt": "2026-10-24T05:18:07.075Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-04-12T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.", "sourceSummary": "PAN-OS / Cloud NGFW / Prisma Accessにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:18:07.075Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "2e2e8ba4f95a8d25b7f6a7763e959b7256bb4e3d9b3470ea041386e7089dcd0e", "sourceModifiedAt": "2025-10-21T23:05:21.315Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "GlobalProtect機能における任意ファイル作成の脆弱性により、認証されていない攻撃者がファイアウォール上でルート権限の任意コードを実行できる可能性があります。また、Cloud NGFW、Panoramaアプライアンス、Prisma Accessはこの脆弱性の影響を受けません。", "risk": "攻撃者がこの脆弱性を利用すると、ファイアウォール上でルート権限のコマンドを実行できるようになります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "攻撃者は認証されていない状態で攻撃を試みます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400" ], "evidenceIds": [ "E1", "E3", "E2" ] }, { "text": "対象はPAN-OSのGlobalProtect機能が有効な環境です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "影響を受けるバージョンは、PAN-OS 10.2.0 以上 10.2.9‑h1 未満、11.0.0 以上 11.0.4‑h1 未満、11.1.0 以上 11.1.2‑h3 未満です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "Cloud NGFW、Panoramaアプライアンス、Prisma Accessはこの脆弱性の影響を受けません。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Palo Alto Networks / PAN-OS。影響なしとして記載：9.0.0。影響なしとして記載：9.1.0。影響なしとして記載：10.0.0。影響なしとして記載：10.1.0。影響ありとして記載：10.2.0以上、10.2.9-h1未満。途中の変更：10.2.9-h1から影響なし。影響ありとして記載：11.0.0以上、11.0.4-h1未満。途中の変更：11.0.4-h1から影響なし。影響ありとして記載：11.1.0以上、11.1.2-h3未満。途中の変更：11.1.2-h3から影響なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Palo Alto Networks / Cloud NGFW。影響なしとして記載：All。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Palo Alto Networks / Prisma Access。影響なしとして記載：All。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json" ], "evidenceIds": [ "E6" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400" ], "evidenceIds": [ "E9" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json" ], "evidenceIds": [ "E4" ] }, { "text": "「PAN-OS / Cloud NGFW / Prisma Access」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-3400", "https://security.paloaltonetworks.com/CVE-2024-3400", "https://unit42.paloaltonetworks.com/cve-2024-3400/", "https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/", "https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400", "https://nvd.nist.gov/vuln/detail/CVE-2024-3400" ] } ], "actions": [ { "text": "修正済みバージョンのPAN‑OS（10.2.9‑h1、11.0.4‑h1、11.1.2‑h3 以降）へただちにアップグレードすることを強く推奨します。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json" ], "evidenceIds": [ "E7" ] }, { "text": "「CVE-2024-3400」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-3400", "https://security.paloaltonetworks.com/CVE-2024-3400", "https://unit42.paloaltonetworks.com/cve-2024-3400/", "https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/", "https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400", "https://nvd.nist.gov/vuln/detail/CVE-2024-3400" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-3400", "https://security.paloaltonetworks.com/CVE-2024-3400", "https://unit42.paloaltonetworks.com/cve-2024-3400/", "https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/", "https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400", "https://nvd.nist.gov/vuln/detail/CVE-2024-3400" ] } ], "temporaryMitigations": [ { "text": "Threat Preventionサブスクリプションがある場合、Threat ID 95187、95189、95191 を使用してこの脆弱性への攻撃をブロックできます。GlobalProtectインターフェースに脆弱性保護を適用する必要があります。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json" ], "evidenceIds": [ "E8" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-3400", "https://security.paloaltonetworks.com/CVE-2024-3400", "https://unit42.paloaltonetworks.com/cve-2024-3400/", "https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/", "https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400", "https://nvd.nist.gov/vuln/detail/CVE-2024-3400" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "label": "CVE：palo_alto" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-3400", "label": "CVE公式レコード" }, { "url": "https://security.paloaltonetworks.com/CVE-2024-3400", "label": "CISAが示す関連情報" }, { "url": "https://unit42.paloaltonetworks.com/cve-2024-3400/", "label": "CVE掲載の参考情報" }, { "url": "https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/", "label": "CVE掲載の参考情報" }, { "url": "https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3400", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.\n\nCloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourceField": "/containers/cna/title", "excerpt": "PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400", "sourceField": "retained:/originalText", "excerpt": "Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"PAN-OS\",\"vendor\":\"Palo Alto Networks\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"9.0.0\"},{\"status\":\"unaffected\",\"version\":\"9.1.0\"},{\"status\":\"unaffected\",\"version\":\"10.0.0\"},{\"status\":\"unaffected\",\"version\":\"10.1.0\"},{\"changes\":[{\"at\":\"10.2.9-h1\",\"status\":\"unaffected\"}],\"lessThan\":\"10.2.9-h1\",\"status\":\"affected\",\"version\":\"10.2.0\",\"versionType\":\"custom\"},{\"changes\":[{\"at\":\"11.0.4-h1\",\"status\":\"unaffected\"}],\"lessThan\":\"11.0.4-h1\",\"status\":\"affected\",\"version\":\"11.0.0\",\"versionType\":\"custom\"},{\"changes\":[{\"at\":\"11.1.2-h3\",\"status\":\"unaffected\"}],\"lessThan\":\"11.1.2-h3\",\"status\":\"affected\",\"version\":\"11.1.0\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Cloud NGFW\",\"vendor\":\"Palo Alto Networks\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"All\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Prisma Access\",\"vendor\":\"Palo Alto Networks\",\"versions\":[{\"status\":\"unaffected\",\"version\":\"All\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "We strongly advise customers to immediately upgrade to a fixed version of PAN-OS to protect their devices even when workarounds and mitigations have been applied.\n\nThis issue is fixed in PAN-OS 10.2.9-h1, PAN-OS 11.0.4-h1, PAN-OS 11.1.2-h3, and in all later PAN-OS versions. Customers who upgrade to these versions will be fully protected.", "language": "en", "representation": "source_excerpt" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3400.json", "sourceField": "/containers/cna/workarounds/0/value", "excerpt": "Recommended Mitigation: Customers with a Threat Prevention subscription can block attacks for this vulnerability using Threat IDs 95187, 95189, and 95191 (available in Applications and Threats content version 8836-8695 and later). Please monitor this advisory and new Threat Prevention content updates for additional Threat Prevention IDs around CVE-2024-3400.\n\nTo apply the Threat IDs, customers must ensure that vulnerability protection has been applied to their GlobalProtect interface to prevent exploitation of this issue on their device. Please see https://live.paloaltonetworks.com/t5/globalprotect-articles/applying-vulnerability-protection-to-globalprotect-interfaces/ta-p/340184 for more information.", "language": "en", "representation": "source_excerpt" }, { "id": "E9", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3400", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-3400\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-3400（PAN-OS / Cloud NGFW / Prisma Access）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者は認証されていない状態で攻撃を試みます。\n・対象はPAN-OSのGlobalProtect機能が有効な環境です。\n・影響を受けるバージョンは、PAN-OS 10.2.0 以上 10.2.9‑h1 未満、11.0.0 以上 11.0.4‑h1 未満、11.1.0 以上 11.1.2‑h3 未満です。\n・Cloud NGFW、Panoramaアプライアンス、Prisma Accessはこの脆弱性の影響を受けません。\n・公式の対象表：Palo Alto Networks / PAN-OS。影響なしとして記載：9.0.0。影響なしとして記載：9.1.0。影響なしとして記載：10.0.0。影響なしとして記載：10.1.0。影響ありとして記載：10.2.0以上、10.2.9-h1未満。途中の変更：10.2.9-h1から影響なし。影響ありとして記載：11.0.0以上、11.0.4-h1未満。途中の変更：11.0.4-h1から影響なし。影響ありとして記載：11.1.0以上、11.1.2-h3未満。途中の変更：11.1.2-h3から影響なし。\n・公式の対象表：Palo Alto Networks / Cloud NGFW。影響なしとして記載：All。\n・公式の対象表：Palo Alto Networks / Prisma Access。影響なしとして記載：All。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-3400", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:18:07.075Z", "lastSuccess": "2026-10-24T05:18:07.075Z", "sourceCheckedAt": "2026-10-24T05:18:07.075Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-2757", "aliases": [ "GHSA-fjp9-9hwx-59fq" ], "title": "PHP：サービス停止", "summary": "PHP 8.3.* のバージョンで、8.3.5 未満の場合、mb_encode_mimeheader() 関数が長い非空白文字列の後に空白が続く特定の入力で無限に実行され続けます。これにより、攻撃者がその関数を使用するアプリケーションにデータを送信した場合、サービスが利用できなくなる可能性があります。", "risk": "この問題が悪用されると、サービスが利用できなくなる（Denial of Service）可能性があります。", "product": "PHP", "category": "php", "component": "core", "severity": "high", "cvss": 7.5, "cvssVersion": "3.1", "cvssSource": "php", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "affected": [ { "product": "PHP", "range": "8.3.* / < 8.3.5" } ], "fixed": [ "8.3.6" ], "steps": [ "PHP を 8.3.6 以降のバージョンにアップデートしてください。", "レンタルサーバーは、サーバー会社に対象サイトのPHP更新を依頼するか、同社の管理画面で修正を含む提供版へ変更します。自分で管理しているサーバーは、管理者がOS・配布元の正規パッケージで更新し、必要なサービスの再起動まで行ってください。系列を変える場合はアプリの互換性も確認します。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2757.json", "label": "CVE：php" }, { "url": "https://github.com/php/php-src/security/advisories/GHSA-fjp9-9hwx-59fq", "label": "PHP開発元のアドバイザリ" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-2757", "label": "CVE公式レコード" }, { "url": "http://www.openwall.com/lists/oss-security/2024/04/12/11", "label": "CVE掲載の参考情報" }, { "url": "https://security.netapp.com/advisory/ntap-20240510-0011/", "label": "CVE掲載の参考情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://www.php.net/manual/en/install.general.php", "label": "PHP公式：実行環境とインストール" }, { "url": "https://www.php.net/supported-versions.php", "label": "PHP公式：サポート対象の系列" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "publishedAt": "2024-04-11T23:00:59.000Z", "modifiedAt": "2025-11-04T17:18:03.534Z", "fetchedAt": "2026-10-24T05:18:07.393Z", "exploitStatus": "unknown", "sources": [ "CVE", "PHP Security" ], "originalText": "In PHP 8.3.* before 8.3.5, function mb_encode_mimeheader() runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function.", "sourceTitle": "PHP mb_encode_mimeheader runs endlessly for some inputs", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "PHP", "vendor": "PHP Group", "versions": [ { "lessThan": "8.3.5", "status": "affected", "version": "8.3.*", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-2757", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2757.json", "fetchedAt": "2026-10-24T05:18:07.393Z", "publishedAt": "2024-04-29T03:49:15.519Z", "modifiedAt": "2025-11-04T17:18:03.534Z", "state": "published", "provider": "php", "title": "PHP mb_encode_mimeheader runs endlessly for some inputs", "descriptions": [ { "lang": "en", "value": "In PHP 8.3.* before 8.3.5, function mb_encode_mimeheader() runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "### Summary\r\nCertain inputs provided to mb_encode_mimeheader trigger an endless loop.\n\n### Details\r\nA discernible pattern has not yet been identified, but a specific string consistently reproduces the issue.\n\n### Impact\r\nGiven that this function is integral to numerous email processing routines, including those handling potentially untrusted user inputs, this vulnerability could be exploited for denial-of-service attacks. For instance, CakePHP 5 relies on this function to encode email subjects.\r\nhttps://github.com/cakephp/cakephp/blob/5.x/src/Mailer/Message.php#L815", "sourcePath": "/description", "representation": "defensive_sections", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-fjp9-9hwx-59fq" } ], "affected": [ { "vendor": "PHP Group", "product": "PHP", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "8.3.*", "lessThan": "8.3.5", "versionType": "semver", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Package php-src; vulnerable range: < 8.3.5; patched versions: 8.3.6", "sourcePath": "/vulnerabilities/0/patched_versions", "representation": "structured_field_summary", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-fjp9-9hwx-59fq" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "provider": "php", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/php/php-src/security/advisories/GHSA-fjp9-9hwx-59fq", "label": "PHP開発元のアドバイザリ", "provider": "PHP Security", "sourcePath": "/html_url" }, { "url": "http://www.openwall.com/lists/oss-security/2024/04/12/11", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://security.netapp.com/advisory/ntap-20240510-0011/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJZK3X6B7FBE32FETDSMRLJXTFTHKWSY/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2757.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"PHP\",\"vendor\":\"PHP Group\",\"versions\":[{\"lessThan\":\"8.3.5\",\"status\":\"affected\",\"version\":\"8.3.*\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2757.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "In PHP 8.3.* before 8.3.5, function mb_encode_mimeheader() runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2757.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "php:GHSA-fjp9-9hwx-59fq:/description", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-fjp9-9hwx-59fq", "sourcePath": "/description", "text": "### Summary\r\nCertain inputs provided to mb_encode_mimeheader trigger an endless loop.\n\n### Details\r\nA discernible pattern has not yet been identified, but a specific string consistently reproduces the issue.\n\n### Impact\r\nGiven that this function is integral to numerous email processing routines, including those handling potentially untrusted user inputs, this vulnerability could be exploited for denial-of-service attacks. For instance, CakePHP 5 relies on this function to encode email subjects.\r\nhttps://github.com/cakephp/cakephp/blob/5.x/src/Mailer/Message.php#L815", "truncated": false, "representation": "defensive_sections", "filtered": true }, { "evidenceId": "php:GHSA-fjp9-9hwx-59fq:/vulnerabilities/0", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-fjp9-9hwx-59fq", "sourcePath": "/vulnerabilities/0", "text": "{\"package\":{\"ecosystem\":\"\",\"name\":\"\"},\"vulnerable_version_range\":\"< 8.3.5\",\"patched_versions\":\"8.3.6\",\"vulnerable_functions\":[]}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record_with_vendor_advisory", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 PHP開発元のアドバイザリ本文・明記された修正版を追加し、各抜粋の実際の取得元URLを保持しています。" }, "primaryModifiedAt": "2025-11-04T17:18:03.534Z", "supplementarySources": [ { "sourceType": "PHP Security", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-fjp9-9hwx-59fq", "modifiedAt": "2024-04-11T23:00:59.000Z", "provider": "The PHP Group", "limits": { "completeness": "official_advisory", "truncatedFields": [], "note": "PHP開発元のアドバイザリです。要約・影響・対策と構造化された対象範囲・修正版を取得しています。攻撃実証コードと再現手順は除外しています。" } } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-11-04T17:18:03.534Z", "fetchedAt": "2026-10-24T05:18:07.393Z", "state": "published" }, { "source": "PHP Security", "modifiedAt": "2024-04-11T23:00:59.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceSummary": "PHPにサービス停止に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "処理の停止や過大な負荷により、サービスを利用できなくなる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:31:27.075Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ac4a8a13171a49f457fbed6dec89e316b23c21696766693f5e24c8ec333aece1", "sourceModifiedAt": "2025-11-04T17:18:03.534Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "PHP 8.3.* のバージョンで、8.3.5 未満の場合、mb_encode_mimeheader() 関数が長い非空白文字列の後に空白が続く特定の入力で無限に実行され続けます。これにより、攻撃者がその関数を使用するアプリケーションにデータを送信した場合、サービスが利用できなくなる可能性があります。", "risk": "この問題が悪用されると、サービスが利用できなくなる（Denial of Service）可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "PHP 8.3.* のバージョンで、8.3.5 未満は影響があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2757.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "mb_encode_mimeheader() 関数を使用する PHP アプリケーションが対象です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2757.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：PHP Group / PHP。影響ありとして記載：8.3系のうち、8.3.5未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2757.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2757.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressを使っている場合は、管理画面の「ツール」→「サイトヘルス」→「情報」→「サーバー」で「PHPバージョン」を控えます。PHPはサーバー側のソフトウェアなので、WordPress本体の更新だけではPHPの更新にはなりません。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://www.php.net/manual/en/install.general.php" ] }, { "text": "それ以外は、契約しているレンタルサーバーの管理画面で、対象ドメインに割り当てられたPHPの版を確認します。画面に番号が出ない場合は、ドメイン名と下の問い合わせ文をサーバー会社へ送ってください。複数のサイトがある場合は、サイトごとに確認します。", "kind": "procedure", "sourceUrls": [ "https://www.php.net/manual/en/install.general.php" ] } ], "actions": [ { "text": "PHP を 8.3.6 以降のバージョンにアップデートしてください。", "kind": "fix", "sourceUrls": [ "https://github.com/php/php-src/security/advisories/GHSA-fjp9-9hwx-59fq" ], "evidenceIds": [ "E4" ] }, { "text": "レンタルサーバーは、サーバー会社に対象サイトのPHP更新を依頼するか、同社の管理画面で修正を含む提供版へ変更します。自分で管理しているサーバーは、管理者がOS・配布元の正規パッケージで更新し、必要なサービスの再起動まで行ってください。系列を変える場合はアプリの互換性も確認します。", "kind": "procedure", "sourceUrls": [ "https://www.php.net/manual/en/install.general.php", "https://www.php.net/supported-versions.php", "https://documentation.ubuntu.com/security/security-updates/" ] } ], "temporaryMitigations": [ { "text": "自分でPHPの設定値を変更する前に、サーバー会社へ「このCVEに有効な回避策・副作用・修正予定」を確認してください。下の問い合わせ文を使えます。一般的なWAFやバックアップだけで修正済みとは扱わないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-2757", "https://github.com/php/php-src/security/advisories/GHSA-fjp9-9hwx-59fq", "http://www.openwall.com/lists/oss-security/2024/04/12/11", "https://security.netapp.com/advisory/ntap-20240510-0011/" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2757.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後は、実際にWebサイトを動かしているPHPの版を管理画面・サイトヘルスで再確認し、ログインやフォーム送信などを試します。古い番号を保った修正パッケージの場合は、このCVEの修正が適用済みであることを提供元に確認してください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://access.redhat.com/solutions/57665" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2757.json", "label": "CVE：php" }, { "url": "https://github.com/php/php-src/security/advisories/GHSA-fjp9-9hwx-59fq", "label": "PHP開発元のアドバイザリ" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-2757", "label": "CVE公式レコード" }, { "url": "http://www.openwall.com/lists/oss-security/2024/04/12/11", "label": "CVE掲載の参考情報" }, { "url": "https://security.netapp.com/advisory/ntap-20240510-0011/", "label": "CVE掲載の参考情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://www.php.net/manual/en/install.general.php", "label": "PHP公式：実行環境とインストール" }, { "url": "https://www.php.net/supported-versions.php", "label": "PHP公式：サポート対象の系列" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2757.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "In PHP 8.3.* before 8.3.5, function mb_encode_mimeheader() runs endlessly for some inputs that contain long strings of non-space characters followed by a space. This could lead to a potential DoS attack if a hostile user sends data to an application that uses this function.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2757.json", "sourceField": "/containers/cna/title", "excerpt": "PHP mb_encode_mimeheader runs endlessly for some inputs", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2757.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"PHP\",\"vendor\":\"PHP Group\",\"versions\":[{\"lessThan\":\"8.3.5\",\"status\":\"affected\",\"version\":\"8.3.*\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://github.com/php/php-src/security/advisories/GHSA-fjp9-9hwx-59fq", "sourceField": "/fixed", "excerpt": "[\"8.3.6\"]", "language": null } ], "supportRequest": "件名：CVE-2024-2757（PHP）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・PHP 8.3.* のバージョンで、8.3.5 未満は影響があります。\n・mb_encode_mimeheader() 関数を使用する PHP アプリケーションが対象です。\n・公式の対象表：PHP Group / PHP。影響ありとして記載：8.3系のうち、8.3.5未満。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-2757", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:18:07.393Z", "lastSuccess": "2026-10-24T05:18:07.393Z", "sourceCheckedAt": "2026-10-24T05:18:07.393Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-3096", "aliases": [ "GHSA-h746-cjrr-wfmr" ], "title": "PHP：脆弱性情報", "summary": "PHP バージョン 8.1.*（8.1.28 未満）、8.2.*（8.2.18 未満）、8.3.*（8.3.5 未満）において、password_hash() で保存されたパスワードがヌルバイト（\\x00）で始まる場合、空文字列を password_verify() で検証すると誤って true が返される。", "risk": "ヌルバイトで始まるパスワードが設定されていると、攻撃者は空文字列でログインを試みるだけでアカウントを不正に取得できる可能性がある。", "product": "PHP", "category": "php", "component": "core", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "php", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "affected": [ { "product": "PHP", "range": "8.1.* / < 8.1.28" }, { "product": "PHP", "range": "8.2.* / < 8.2.18" }, { "product": "PHP", "range": "8.3.* / < 8.3.5" }, { "product": "PHP", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [ "8.1.28", "8.2.18", "8.3.6" ], "steps": [ "PHP 8.1.28、8.2.18、8.3.6 にアップデートする。", "レンタルサーバーは、サーバー会社に対象サイトのPHP更新を依頼するか、同社の管理画面で修正を含む提供版へ変更します。自分で管理しているサーバーは、管理者がOS・配布元の正規パッケージで更新し、必要なサービスの再起動まで行ってください。系列を変える場合はアプリの互換性も確認します。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json", "label": "CVE：php" }, { "url": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-h746-cjrr-wfmr", "label": "CVE：php" }, { "url": "https://github.com/php/php-src/security/advisories/GHSA-h746-cjrr-wfmr", "label": "PHP開発元のアドバイザリ" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-3096", "label": "CVE公式レコード" }, { "url": "http://www.openwall.com/lists/oss-security/2024/04/12/11", "label": "CVE掲載の参考情報" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00005.html", "label": "CVE掲載の参考情報" }, { "url": "https://security.netapp.com/advisory/ntap-20240510-0010/", "label": "CVE掲載の参考情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://www.php.net/manual/en/install.general.php", "label": "PHP公式：実行環境とインストール" }, { "url": "https://www.php.net/supported-versions.php", "label": "PHP公式：サポート対象の系列" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "publishedAt": "2024-04-11T22:59:01.000Z", "modifiedAt": "2025-11-04T17:19:57.320Z", "fetchedAt": "2026-10-24T05:18:08.615Z", "exploitStatus": "unknown", "sources": [ "CVE", "PHP Security" ], "originalText": "In PHP  version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\\x00), testing a blank string as the password via password_verify() will incorrectly return true.", "sourceTitle": "PHP function password_verify can erroneously return true when argument contains NUL", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "product": "PHP", "vendor": "PHP Group", "versions": [ { "lessThan": "8.1.28", "status": "affected", "version": "8.1.*", "versionType": "semver" }, { "lessThan": "8.2.18", "status": "affected", "version": "8.2.*", "versionType": "semver" }, { "lessThan": "8.3.5", "status": "affected", "version": "8.3.*", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-3096", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json", "fetchedAt": "2026-10-24T05:18:08.615Z", "publishedAt": "2024-04-29T03:42:04.093Z", "modifiedAt": "2025-11-04T17:19:57.320Z", "state": "published", "provider": "php", "title": "PHP function password_verify can erroneously return true when argument contains NUL", "descriptions": [ { "lang": "en", "value": "In PHP  version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\\x00), testing a blank string as the password via password_verify() will incorrectly return true.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "### Summary\r\nIf a password stored with `password_hash` starts with a null byte (`\\x00`), testing a blank string as the password via `password_verify` will incorrectly return `true`.\r\n\r\nIf a user were able to create a password with a leading null byte (unlikely, but syntactically valid), an attacker could trivially compromise the victim's account by attempting to sign in with a blank string.\n\n### Details\r\n\r\n\r\n\r\nThis appears to exist at least back to 8.1.0: https://3v4l.org/Z0pcl\n\n### Impact\r\nMedium?\r\n\r\nThis could be catastrophic in the right circumstance, but the chance of that circumstance existing is extremely low. Typically a user would get blocked from setting a password containing (never mind starting with) binary data through input filtering and application-specific password rules. Similar rules are likely employed on the checking side, though usually less strict.", "sourcePath": "/description", "representation": "defensive_sections", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-h746-cjrr-wfmr" } ], "affected": [ { "vendor": "PHP Group", "product": "PHP", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "8.1.*", "lessThan": "8.1.28", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "8.2.*", "lessThan": "8.2.18", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "8.3.*", "lessThan": "8.3.5", "versionType": "semver", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Package php-src; vulnerable range: < 8.1.28; patched versions: 8.1.28", "sourcePath": "/vulnerabilities/0/patched_versions", "representation": "structured_field_summary", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-h746-cjrr-wfmr" }, { "lang": "en", "value": "Package php-src; vulnerable range: < 8.2.18; patched versions: 8.2.18", "sourcePath": "/vulnerabilities/1/patched_versions", "representation": "structured_field_summary", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-h746-cjrr-wfmr" }, { "lang": "en", "value": "Package php-src; vulnerable range: < 8.3.5; patched versions: 8.3.6", "sourcePath": "/vulnerabilities/2/patched_versions", "representation": "structured_field_summary", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-h746-cjrr-wfmr" } ], "workarounds": [ { "lang": "en", "value": "Pre-filter potential password strings to ensure they do not contain NUL bytes.", "sourcePath": "/containers/cna/workarounds/0/value" } ], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-20", "lang": "en", "description": "CWE-20 Improper Input Validation", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "provider": "php", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/php/php-src/security/advisories/GHSA-h746-cjrr-wfmr", "label": "PHP開発元のアドバイザリ", "provider": "PHP Security", "sourcePath": "/html_url" }, { "url": "http://www.openwall.com/lists/oss-security/2024/04/12/11", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00005.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://security.netapp.com/advisory/ntap-20240510-0010/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGWIK3HMBACERGB4TSBB2JUOMPYY2VKY/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJZK3X6B7FBE32FETDSMRLJXTFTHKWSY/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"product\":\"PHP\",\"vendor\":\"PHP Group\",\"versions\":[{\"lessThan\":\"8.1.28\",\"status\":\"affected\",\"version\":\"8.1.*\",\"versionType\":\"semver\"},{\"lessThan\":\"8.2.18\",\"status\":\"affected\",\"version\":\"8.2.*\",\"versionType\":\"semver\"},{\"lessThan\":\"8.3.5\",\"status\":\"affected\",\"version\":\"8.3.*\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "In PHP  version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\\x00), testing a blank string as the password via password_verify() will incorrectly return true.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/workarounds/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json", "sourcePath": "/containers/cna/workarounds/0/value", "text": "Pre-filter potential password strings to ensure they do not contain NUL bytes.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-20\",\"description\":\"CWE-20 Improper Input Validation\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"NONE\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"REQUIRED\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "php:GHSA-h746-cjrr-wfmr:/description", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-h746-cjrr-wfmr", "sourcePath": "/description", "text": "### Summary\r\nIf a password stored with `password_hash` starts with a null byte (`\\x00`), testing a blank string as the password via `password_verify` will incorrectly return `true`.\r\n\r\nIf a user were able to create a password with a leading null byte (unlikely, but syntactically valid), an attacker could trivially compromise the victim's account by attempting to sign in with a blank string.\n\n### Details\r\n\r\n\r\n\r\nThis appears to exist at least back to 8.1.0: https://3v4l.org/Z0pcl\n\n### Impact\r\nMedium?\r\n\r\nThis could be catastrophic in the right circumstance, but the chance of that circumstance existing is extremely low. Typically a user would get blocked from setting a password containing (never mind starting with) binary data through input filtering and application-specific password rules. Similar rules are likely employed on the checking side, though usually less strict.", "truncated": false, "representation": "defensive_sections", "filtered": true }, { "evidenceId": "php:GHSA-h746-cjrr-wfmr:/vulnerabilities/0", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-h746-cjrr-wfmr", "sourcePath": "/vulnerabilities/0", "text": "{\"package\":{\"ecosystem\":\"\",\"name\":\"\"},\"vulnerable_version_range\":\"< 8.1.28\",\"patched_versions\":\" 8.1.28\",\"vulnerable_functions\":[]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "php:GHSA-h746-cjrr-wfmr:/vulnerabilities/1", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-h746-cjrr-wfmr", "sourcePath": "/vulnerabilities/1", "text": "{\"package\":{\"ecosystem\":\"\",\"name\":\"\"},\"vulnerable_version_range\":\"< 8.2.18\",\"patched_versions\":\"8.2.18\",\"vulnerable_functions\":[]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "php:GHSA-h746-cjrr-wfmr:/vulnerabilities/2", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-h746-cjrr-wfmr", "sourcePath": "/vulnerabilities/2", "text": "{\"package\":{\"ecosystem\":\"\",\"name\":\"\"},\"vulnerable_version_range\":\"< 8.3.5\",\"patched_versions\":\"8.3.6\",\"vulnerable_functions\":[]}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record_with_vendor_advisory", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 PHP開発元のアドバイザリ本文・明記された修正版を追加し、各抜粋の実際の取得元URLを保持しています。" }, "primaryModifiedAt": "2025-11-04T17:19:57.320Z", "supplementarySources": [ { "sourceType": "PHP Security", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-h746-cjrr-wfmr", "modifiedAt": "2024-04-11T22:59:02.000Z", "provider": "The PHP Group", "limits": { "completeness": "official_advisory", "truncatedFields": [], "note": "PHP開発元のアドバイザリです。要約・影響・対策と構造化された対象範囲・修正版を取得しています。攻撃実証コードと再現手順は除外しています。" } } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-11-04T17:19:57.320Z", "fetchedAt": "2026-10-24T05:18:08.615Z", "state": "published" }, { "source": "PHP Security", "modifiedAt": "2024-04-11T22:59:02.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceSummary": "PHPに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:31:27.867Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e382d3704868d149617fd26bb9961ecf303e7bff8f5939cc6599f9f11527a90b", "sourceModifiedAt": "2025-11-04T17:19:57.320Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "PHP バージョン 8.1.*（8.1.28 未満）、8.2.*（8.2.18 未満）、8.3.*（8.3.5 未満）において、password_hash() で保存されたパスワードがヌルバイト（\\x00）で始まる場合、空文字列を password_verify() で検証すると誤って true が返される。", "risk": "ヌルバイトで始まるパスワードが設定されていると、攻撃者は空文字列でログインを試みるだけでアカウントを不正に取得できる可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "PHP 8.1.* のバージョンで、8.1.28 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "PHP 8.2.* のバージョンで、8.2.18 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "PHP 8.3.* のバージョンで、8.3.5 未満は影響を受ける。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "公式の対象表：PHP Group / PHP。影響ありとして記載：8.1系のうち、8.1.28未満。影響ありとして記載：8.2系のうち、8.2.18未満。影響ありとして記載：8.3系のうち、8.3.5未満。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json" ], "evidenceIds": [ "E4" ] }, { "text": "WordPressを使っている場合は、管理画面の「ツール」→「サイトヘルス」→「情報」→「サーバー」で「PHPバージョン」を控えます。PHPはサーバー側のソフトウェアなので、WordPress本体の更新だけではPHPの更新にはなりません。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://www.php.net/manual/en/install.general.php" ] }, { "text": "それ以外は、契約しているレンタルサーバーの管理画面で、対象ドメインに割り当てられたPHPの版を確認します。画面に番号が出ない場合は、ドメイン名と下の問い合わせ文をサーバー会社へ送ってください。複数のサイトがある場合は、サイトごとに確認します。", "kind": "procedure", "sourceUrls": [ "https://www.php.net/manual/en/install.general.php" ] } ], "actions": [ { "text": "PHP 8.1.28、8.2.18、8.3.6 にアップデートする。", "kind": "fix", "sourceUrls": [ "https://github.com/php/php-src/security/advisories/GHSA-h746-cjrr-wfmr" ], "evidenceIds": [ "E5" ] }, { "text": "レンタルサーバーは、サーバー会社に対象サイトのPHP更新を依頼するか、同社の管理画面で修正を含む提供版へ変更します。自分で管理しているサーバーは、管理者がOS・配布元の正規パッケージで更新し、必要なサービスの再起動まで行ってください。系列を変える場合はアプリの互換性も確認します。", "kind": "procedure", "sourceUrls": [ "https://www.php.net/manual/en/install.general.php", "https://www.php.net/supported-versions.php", "https://documentation.ubuntu.com/security/security-updates/" ] } ], "temporaryMitigations": [ { "text": "パスワード文字列にヌルバイトが含まれないよう事前にフィルタリングする。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json" ], "evidenceIds": [ "E6" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後は、実際にWebサイトを動かしているPHPの版を管理画面・サイトヘルスで再確認し、ログインやフォーム送信などを試します。古い番号を保った修正パッケージの場合は、このCVEの修正が適用済みであることを提供元に確認してください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://access.redhat.com/solutions/57665" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json", "label": "CVE：php" }, { "url": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-h746-cjrr-wfmr", "label": "CVE：php" }, { "url": "https://github.com/php/php-src/security/advisories/GHSA-h746-cjrr-wfmr", "label": "PHP開発元のアドバイザリ" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-3096", "label": "CVE公式レコード" }, { "url": "http://www.openwall.com/lists/oss-security/2024/04/12/11", "label": "CVE掲載の参考情報" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00005.html", "label": "CVE掲載の参考情報" }, { "url": "https://security.netapp.com/advisory/ntap-20240510-0010/", "label": "CVE掲載の参考情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://www.php.net/manual/en/install.general.php", "label": "PHP公式：実行環境とインストール" }, { "url": "https://www.php.net/supported-versions.php", "label": "PHP公式：サポート対象の系列" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "In PHP  version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\\x00), testing a blank string as the password via password_verify() will incorrectly return true.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json", "sourceField": "/containers/cna/title", "excerpt": "PHP function password_verify can erroneously return true when argument contains NUL", "language": null }, { "id": "E3", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-h746-cjrr-wfmr", "sourceField": "/description", "excerpt": "### Summary\r\nIf a password stored with `password_hash` starts with a null byte (`\\x00`), testing a blank string as the password via `password_verify` will incorrectly return `true`.\r\n\r\nIf a user were able to create a password with a leading null byte (unlikely, but syntactically valid), an attacker could trivially compromise the victim's account by attempting to sign in with a blank string.\n\n### Details\r\n\r\n\r\n\r\nThis appears to exist at least back to 8.1.0: https://3v4l.org/Z0pcl\n\n### Impact\r\nMedium?\r\n\r\nThis could be catastrophic in the right circumstance, but the chance of that circumstance existing is extremely low. Typically a user would get blocked from setting a password containing (never mind starting with) binary data through input filtering and application-specific password rules. Similar rules are likely employed on the checking side, though usually less strict.", "language": "en", "representation": "defensive_sections", "filtered": true }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"product\":\"PHP\",\"vendor\":\"PHP Group\",\"versions\":[{\"lessThan\":\"8.1.28\",\"status\":\"affected\",\"version\":\"8.1.*\",\"versionType\":\"semver\"},{\"lessThan\":\"8.2.18\",\"status\":\"affected\",\"version\":\"8.2.*\",\"versionType\":\"semver\"},{\"lessThan\":\"8.3.5\",\"status\":\"affected\",\"version\":\"8.3.*\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://github.com/php/php-src/security/advisories/GHSA-h746-cjrr-wfmr", "sourceField": "/fixed", "excerpt": "[\"8.1.28\",\"8.2.18\",\"8.3.6\"]", "language": null }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3096.json", "sourceField": "/containers/cna/workarounds/0/value", "excerpt": "Pre-filter potential password strings to ensure they do not contain NUL bytes.", "language": "en", "representation": "source_excerpt" } ], "supportRequest": "件名：CVE-2024-3096（PHP）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・PHP 8.1.* のバージョンで、8.1.28 未満は影響を受ける。\n・PHP 8.2.* のバージョンで、8.2.18 未満は影響を受ける。\n・PHP 8.3.* のバージョンで、8.3.5 未満は影響を受ける。\n・公式の対象表：PHP Group / PHP。影響ありとして記載：8.1系のうち、8.1.28未満。影響ありとして記載：8.2系のうち、8.2.18未満。影響ありとして記載：8.3系のうち、8.3.5未満。個別に例外が記されていない版も、原資料では影響ありとされています。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-3096", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:18:08.615Z", "lastSuccess": "2026-10-24T05:18:08.615Z", "sourceCheckedAt": "2026-10-24T05:18:08.615Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-1874", "aliases": [ "GHSA-pc52-254m-w9w7" ], "title": "PHP：コード実行", "summary": "PHP 8.1.*（8.1.28 未満）、8.2.*（8.2.18 未満）、8.3.*（8.3.5 未満）で、proc_open() を配列構文で呼び出すと、エスケープが不十分です。実行するコマンドの引数が攻撃者に制御できる場合、Windows のシェル上で任意のコマンドを実行させることができます。", "risk": "攻撃者が任意のコマンドを Windows のシェル上で実行できる可能性があります。", "product": "PHP", "category": "php", "component": "core", "severity": "critical", "cvss": 9.4, "cvssVersion": "3.1", "cvssSource": "php", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "affected": [ { "product": "PHP", "range": "8.1.* / < 8.1.28（環境: Windows）" }, { "product": "PHP", "range": "8.2.* / < 8.2.18（環境: Windows）" }, { "product": "PHP", "range": "8.3.* / < 8.3.5（環境: Windows）" }, { "product": "PHP", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。（環境: Windows）" } ], "fixed": [ "8.1.28", "8.2.18", "8.3.6" ], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json", "label": "CVE：php" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-1874", "label": "CVE公式レコード" }, { "url": "https://github.com/php/php-src/security/advisories/GHSA-pc52-254m-w9w7", "label": "PHP開発元のアドバイザリ" }, { "url": "http://www.openwall.com/lists/oss-security/2024/04/12/11", "label": "CVE掲載の参考情報" }, { "url": "https://security.netapp.com/advisory/ntap-20240510-0009/", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2024/06/07/1", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/", "label": "CVE掲載の参考情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://www.php.net/manual/en/install.general.php", "label": "PHP公式：実行環境とインストール" }, { "url": "https://www.php.net/supported-versions.php", "label": "PHP公式：サポート対象の系列" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "publishedAt": "2024-04-11T17:15:14.000Z", "modifiedAt": "2025-11-04T18:22:36.621Z", "fetchedAt": "2026-10-24T05:18:09.524Z", "exploitStatus": "unknown", "sources": [ "CVE", "PHP Security" ], "originalText": "In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.", "sourceTitle": "Command injection via array-ish $command parameter of proc_open()", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "platforms": [ "Windows" ], "product": "PHP", "vendor": "PHP Group", "versions": [ { "lessThan": "8.1.28", "status": "affected", "version": "8.1.*", "versionType": "semver" }, { "lessThan": "8.2.18", "status": "affected", "version": "8.2.*", "versionType": "semver" }, { "lessThan": "8.3.5", "status": "affected", "version": "8.3.*", "versionType": "semver" } ] } ], "configurationNotes": "対象環境・機能: Windows。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-1874", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json", "fetchedAt": "2026-10-24T05:18:09.524Z", "publishedAt": "2024-04-29T03:57:35.624Z", "modifiedAt": "2025-11-04T18:22:36.621Z", "state": "published", "provider": "php", "title": "Command injection via array-ish $command parameter of proc_open()", "descriptions": [ { "lang": "en", "value": "In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "### Summary\r\n**NOTE:** There are undergoing reports regarding the command injection when executing the batch file, and several programming languages are coordinating the disclosure date. If you decide to not consider this as a vulnerability, please do not disclose this behavior until the end of February. If the coordinated disclosure is needed, please let me know.\r\n\r\nDue to the improper handling of command line arguments on Windows, maliciously crafted arguments can inject arbitrary commands even if the `bypass_shell` option is enabled.\n\n### Details\r\n`proc_open` executes external commands passed via its arguments. The documentation of this function [states the following](https://www.php.net/manual/en/function.proc-open.php):\r\n\r\n\r\n\r\n\r\n\r\nHowever, when executing `.bat` or `.cmd` files, `CreateProcess` implicitly spawns `cmd.exe`, resulting in command line arguments being parsed in `cmd.exe` despite the documentation explicitly stating it doesn't spawn the shell.\r\nWhile `proc_open` tries to escape the arguments, command prompts will not recognize `\\` as the escape character. So, the following command line argument will spawn `calc.exe`:\n\n### Impact\r\nThis vulnerability allows malicious command line arguments to execute arbitrary commands if it's passed to `.bat` or `.cmd` through `proc_open`.\r\nSince command line arguments are not expected to be parsed via the shell, it allows unexpected code execution.", "sourcePath": "/description", "representation": "defensive_sections", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-pc52-254m-w9w7" } ], "affected": [ { "vendor": "PHP Group", "product": "PHP", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [ "Windows" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "8.1.*", "lessThan": "8.1.28", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "8.2.*", "lessThan": "8.2.18", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "8.3.*", "lessThan": "8.3.5", "versionType": "semver", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Package php-src; vulnerable range: < 8.1.28; patched versions: 8.1.28", "sourcePath": "/vulnerabilities/0/patched_versions", "representation": "structured_field_summary", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-pc52-254m-w9w7" }, { "lang": "en", "value": "Package php-src; vulnerable range: < 8.2.18; patched versions: 8.2.18", "sourcePath": "/vulnerabilities/1/patched_versions", "representation": "structured_field_summary", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-pc52-254m-w9w7" }, { "lang": "en", "value": "Package php-src; vulnerable range: < 8.3.5; patched versions: 8.3.6", "sourcePath": "/vulnerabilities/2/patched_versions", "representation": "structured_field_summary", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-pc52-254m-w9w7" } ], "workarounds": [ { "lang": "en", "value": "Using proc_open() string syntax avoids the problem.", "sourcePath": "/containers/cna/workarounds/0/value" } ], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-116", "lang": "en", "description": "CWE-116 Improper Encoding or Escaping of Output", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "baseScore": 9.4, "baseSeverity": "CRITICAL", "provider": "php", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/php/php-src/security/advisories/GHSA-pc52-254m-w9w7", "label": "PHP開発元のアドバイザリ", "provider": "PHP Security", "sourcePath": "/html_url" }, { "url": "http://www.openwall.com/lists/oss-security/2024/04/12/11", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://security.netapp.com/advisory/ntap-20240510-0009/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "http://www.openwall.com/lists/oss-security/2024/06/07/1", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" }, { "url": "https://www.vicarius.io/vsociety/posts/command-injection-vulnerability-in-php-on-windows-systems-cve-2024-1874-and-cve-2024-5585", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/6" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGWIK3HMBACERGB4TSBB2JUOMPYY2VKY/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/7" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJZK3X6B7FBE32FETDSMRLJXTFTHKWSY/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/8" }, { "url": "https://www.kb.cert.org/vuls/id/123335", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/9" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"platforms\":[\"Windows\"],\"product\":\"PHP\",\"vendor\":\"PHP Group\",\"versions\":[{\"lessThan\":\"8.1.28\",\"status\":\"affected\",\"version\":\"8.1.*\",\"versionType\":\"semver\"},{\"lessThan\":\"8.2.18\",\"status\":\"affected\",\"version\":\"8.2.*\",\"versionType\":\"semver\"},{\"lessThan\":\"8.3.5\",\"status\":\"affected\",\"version\":\"8.3.*\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/workarounds/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json", "sourcePath": "/containers/cna/workarounds/0/value", "text": "Using proc_open() string syntax avoids the problem.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-116\",\"description\":\"CWE-116 Improper Encoding or Escaping of Output\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"LOW\",\"baseScore\":9.4,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "php:GHSA-pc52-254m-w9w7:/description", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-pc52-254m-w9w7", "sourcePath": "/description", "text": "### Summary\r\n**NOTE:** There are undergoing reports regarding the command injection when executing the batch file, and several programming languages are coordinating the disclosure date. If you decide to not consider this as a vulnerability, please do not disclose this behavior until the end of February. If the coordinated disclosure is needed, please let me know.\r\n\r\nDue to the improper handling of command line arguments on Windows, maliciously crafted arguments can inject arbitrary commands even if the `bypass_shell` option is enabled.\n\n### Details\r\n`proc_open` executes external commands passed via its arguments. The documentation of this function [states the following](https://www.php.net/manual/en/function.proc-open.php):\r\n\r\n\r\n\r\n\r\n\r\nHowever, when executing `.bat` or `.cmd` files, `CreateProcess` implicitly spawns `cmd.exe`, resulting in command line arguments being parsed in `cmd.exe` despite the documentation explicitly stating it doesn't spawn the shell.\r\nWhile `proc_open` tries to escape the arguments, command prompts will not recognize `\\` as the escape character. So, the following command line argument will spawn `calc.exe`:\n\n### Impact\r\nThis vulnerability allows malicious command line arguments to execute arbitrary commands if it's passed to `.bat` or `.cmd` through `proc_open`.\r\nSince command line arguments are not expected to be parsed via the shell, it allows unexpected code execution.", "truncated": false, "representation": "defensive_sections", "filtered": true }, { "evidenceId": "php:GHSA-pc52-254m-w9w7:/vulnerabilities/0", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-pc52-254m-w9w7", "sourcePath": "/vulnerabilities/0", "text": "{\"package\":{\"ecosystem\":\"\",\"name\":\"\"},\"vulnerable_version_range\":\"< 8.1.28\",\"patched_versions\":\" 8.1.28\",\"vulnerable_functions\":[]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "php:GHSA-pc52-254m-w9w7:/vulnerabilities/1", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-pc52-254m-w9w7", "sourcePath": "/vulnerabilities/1", "text": "{\"package\":{\"ecosystem\":\"\",\"name\":\"\"},\"vulnerable_version_range\":\"< 8.2.18\",\"patched_versions\":\"8.2.18\",\"vulnerable_functions\":[]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "php:GHSA-pc52-254m-w9w7:/vulnerabilities/2", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-pc52-254m-w9w7", "sourcePath": "/vulnerabilities/2", "text": "{\"package\":{\"ecosystem\":\"\",\"name\":\"\"},\"vulnerable_version_range\":\"< 8.3.5\",\"patched_versions\":\"8.3.6\",\"vulnerable_functions\":[]}", "truncated": false, "representation": "source_json" } ], "limits": { "completeness": "official_record_with_vendor_advisory", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 PHP開発元のアドバイザリ本文・明記された修正版を追加し、各抜粋の実際の取得元URLを保持しています。" }, "primaryModifiedAt": "2025-11-04T18:22:36.621Z", "supplementarySources": [ { "sourceType": "PHP Security", "sourceUrl": "https://api.github.com/repos/php/php-src/security-advisories/GHSA-pc52-254m-w9w7", "modifiedAt": "2024-04-14T13:19:55.000Z", "provider": "The PHP Group", "limits": { "completeness": "official_advisory", "truncatedFields": [], "note": "PHP開発元のアドバイザリです。要約・影響・対策と構造化された対象範囲・修正版を取得しています。攻撃実証コードと再現手順は除外しています。" } } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-11-04T18:22:36.621Z", "fetchedAt": "2026-10-24T05:18:09.524Z", "state": "published" }, { "source": "PHP Security", "modifiedAt": "2024-04-14T13:19:55.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceSummary": "PHPにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-23T03:31:28.152Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "f24be428c9afe07f8dcb0f5f09e58e490c13da98f4c4f34ab3d1123f5facff3f", "sourceModifiedAt": "2025-11-04T18:22:36.621Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "PHP 8.1.*（8.1.28 未満）、8.2.*（8.2.18 未満）、8.3.*（8.3.5 未満）で、proc_open() を配列構文で呼び出すと、エスケープが不十分です。実行するコマンドの引数が攻撃者に制御できる場合、Windows のシェル上で任意のコマンドを実行させることができます。", "risk": "攻撃者が任意のコマンドを Windows のシェル上で実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Windows 上の PHP 8.1.*（バージョン 8.1.28 未満）が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Windows 上の PHP 8.2.*（バージョン 8.2.18 未満）が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "Windows 上の PHP 8.3.*（バージョン 8.3.5 未満）が影響を受けます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "公式の対象表：PHP Group / PHP。影響ありとして記載：8.1系のうち、8.1.28未満。影響ありとして記載：8.2系のうち、8.2.18未満。影響ありとして記載：8.3系のうち、8.3.5未満。対象の環境：Windows。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressを使っている場合は、管理画面の「ツール」→「サイトヘルス」→「情報」→「サーバー」で「PHPバージョン」を控えます。PHPはサーバー側のソフトウェアなので、WordPress本体の更新だけではPHPの更新にはなりません。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://www.php.net/manual/en/install.general.php" ] }, { "text": "それ以外は、契約しているレンタルサーバーの管理画面で、対象ドメインに割り当てられたPHPの版を確認します。画面に番号が出ない場合は、ドメイン名と下の問い合わせ文をサーバー会社へ送ってください。複数のサイトがある場合は、サイトごとに確認します。", "kind": "procedure", "sourceUrls": [ "https://www.php.net/manual/en/install.general.php" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "proc_open() を文字列構文で使用すると、この問題を回避できます。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json" ], "evidenceIds": [ "E4" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後は、実際にWebサイトを動かしているPHPの版を管理画面・サイトヘルスで再確認し、ログインやフォーム送信などを試します。古い番号を保った修正パッケージの場合は、このCVEの修正が適用済みであることを提供元に確認してください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://access.redhat.com/solutions/57665" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json", "label": "CVE：php" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-1874", "label": "CVE公式レコード" }, { "url": "https://github.com/php/php-src/security/advisories/GHSA-pc52-254m-w9w7", "label": "PHP開発元のアドバイザリ" }, { "url": "http://www.openwall.com/lists/oss-security/2024/04/12/11", "label": "CVE掲載の参考情報" }, { "url": "https://security.netapp.com/advisory/ntap-20240510-0009/", "label": "CVE掲載の参考情報" }, { "url": "http://www.openwall.com/lists/oss-security/2024/06/07/1", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/", "label": "CVE掲載の参考情報" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/", "label": "CVE掲載の参考情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://www.php.net/manual/en/install.general.php", "label": "PHP公式：実行環境とインストール" }, { "url": "https://www.php.net/supported-versions.php", "label": "PHP公式：サポート対象の系列" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json", "sourceField": "/containers/cna/title", "excerpt": "Command injection via array-ish $command parameter of proc_open()", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"platforms\":[\"Windows\"],\"product\":\"PHP\",\"vendor\":\"PHP Group\",\"versions\":[{\"lessThan\":\"8.1.28\",\"status\":\"affected\",\"version\":\"8.1.*\",\"versionType\":\"semver\"},{\"lessThan\":\"8.2.18\",\"status\":\"affected\",\"version\":\"8.2.*\",\"versionType\":\"semver\"},{\"lessThan\":\"8.3.5\",\"status\":\"affected\",\"version\":\"8.3.*\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/1xxx/CVE-2024-1874.json", "sourceField": "/containers/cna/workarounds/0/value", "excerpt": "Using proc_open() string syntax avoids the problem.", "language": "en", "representation": "source_excerpt" } ], "supportRequest": "件名：CVE-2024-1874（PHP）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Windows 上の PHP 8.1.*（バージョン 8.1.28 未満）が影響を受けます。\n・Windows 上の PHP 8.2.*（バージョン 8.2.18 未満）が影響を受けます。\n・Windows 上の PHP 8.3.*（バージョン 8.3.5 未満）が影響を受けます。\n・公式の対象表：PHP Group / PHP。影響ありとして記載：8.1系のうち、8.1.28未満。影響ありとして記載：8.2系のうち、8.2.18未満。影響ありとして記載：8.3系のうち、8.3.5未満。対象の環境：Windows。個別に例外が記されていない版も、原資料では影響ありとされています。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-1874", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:18:09.524Z", "lastSuccess": "2026-10-24T05:18:09.524Z", "sourceCheckedAt": "2026-10-24T05:18:09.524Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-2756", "aliases": [ "GHSA-wpj3-hf5j-x4v4" ], "title": "PHP：脆弱性情報", "summary": "CVE‑2022‑31629 の修正が不完全であるため、ネットワーク攻撃者や同一サイト攻撃者が被害者のブラウザーに標準の安全でないクッキーを設定でき、そのクッキーが PHP アプリケーションで __Host‑ または __Secure‑ クッキーとして扱われます。", "risk": "PHP アプリケーションは本来安全であるべきクッキーを不正に __Host‑ または __Secure‑ として扱う可能性があります。", "product": "PHP", "category": "php", "component": "core", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "php", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "affected": [ { "product": "PHP", "range": "8.1.* / < 8.1.28" }, { "product": "PHP", "range": "8.2.* / < 8.2.18" }, { "product": "PHP", "range": "8.3.* / < 8.3.5" }, { "product": "PHP", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [ "8.1.28", "8.2.18", "8.3.6" ], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json", "label": "CVE：php" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-2756", "label": "CVE公式レコード" }, { "url": "https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4", "label": "PHP開発元のアドバイザリ" }, { "url": "http://www.openwall.com/lists/oss-security/2024/04/12/11", "label": "CVE掲載の参考情報" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00005.html", "label": "CVE掲載の参考情報" }, { "url": "https://security.netapp.com/advisory/ntap-20240510-0008/", "label": "CVE掲載の参考情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://www.php.net/manual/en/install.general.php", "label": "PHP公式：実行環境とインストール" }, { "url": "https://www.php.net/supported-versions.php", "label": "PHP公式：サポート対象の系列" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "publishedAt": "2024-04-11T17:12:53.000Z", "modifiedAt": "2025-11-04T17:18:00.434Z", "fetchedAt": "2026-10-24T06:16:54.869Z", "exploitStatus": "unknown", "sources": [ "CVE", "PHP Security" ], "originalText": "Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.", "sourceTitle": "__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "product": "PHP", "vendor": "PHP Group", "versions": [ { "lessThan": "8.1.28", "status": "affected", "version": "8.1.*", "versionType": "semver" }, { "lessThan": "8.2.18", "status": "affected", "version": "8.2.*", "versionType": "semver" }, { "lessThan": "8.3.5", "status": "affected", "version": "8.3.*", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-2756", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json", "fetchedAt": "2026-10-24T06:16:54.869Z", "publishedAt": "2024-04-29T03:34:16.912Z", "modifiedAt": "2025-11-04T17:18:00.434Z", "state": "published", "provider": "php", "title": "__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix", "descriptions": [ { "lang": "en", "value": "Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "### Summary\n\nDue to an incomplete fix to CVE-2022-31629 , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.\n\n### Details\n\nThe vulnerability is identical to one previously described in https://bugs.php.net/bug.php?id=81727 . Unfortunatly, since CVE-2022-31629 got only partially fixed in PHP >8.1.11, cookies starting with _[Host- are parsed by PHP applications as __Host- . Notice that I reported this vulnerability multiple times via email after the fix for CVE-2022-31629 landed (I am the original reporter of that CVE), but I guess that the message got lost.", "sourcePath": "html:.markdown-body.comment-body", "representation": "defensive_sections", "sourceUrl": "https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4" } ], "affected": [ { "vendor": "PHP Group", "product": "PHP", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "8.1.*", "lessThan": "8.1.28", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "8.2.*", "lessThan": "8.2.18", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "8.3.*", "lessThan": "8.3.5", "versionType": "semver", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Package php-src; vulnerable range: > 8.1.11, < 8.1.28; patched versions: 8.1.28", "sourcePath": "html:Patched_versions", "representation": "structured_field_summary", "sourceUrl": "https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4" }, { "lang": "en", "value": "Package php-src; vulnerable range: < 8.2.18; patched versions: 8.2.18", "sourcePath": "html:Patched_versions", "representation": "structured_field_summary", "sourceUrl": "https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4" }, { "lang": "en", "value": "Package php-src; vulnerable range: < 8.3.5; patched versions: 8.3.6", "sourcePath": "html:Patched_versions", "representation": "structured_field_summary", "sourceUrl": "https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-20", "lang": "en", "description": "CWE-20 Improper Input Validation", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "provider": "php", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4", "label": "PHP開発元のアドバイザリ", "provider": "PHP Security", "sourcePath": "/html_url" }, { "url": "http://www.openwall.com/lists/oss-security/2024/04/12/11", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00005.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://security.netapp.com/advisory/ntap-20240510-0008/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGWIK3HMBACERGB4TSBB2JUOMPYY2VKY/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJZK3X6B7FBE32FETDSMRLJXTFTHKWSY/", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"product\":\"PHP\",\"vendor\":\"PHP Group\",\"versions\":[{\"lessThan\":\"8.1.28\",\"status\":\"affected\",\"version\":\"8.1.*\",\"versionType\":\"semver\"},{\"lessThan\":\"8.2.18\",\"status\":\"affected\",\"version\":\"8.2.*\",\"versionType\":\"semver\"},{\"lessThan\":\"8.3.5\",\"status\":\"affected\",\"version\":\"8.3.*\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-20\",\"description\":\"CWE-20 Improper Input Validation\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"NONE\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"REQUIRED\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "php:GHSA-wpj3-hf5j-x4v4:html:.markdown-body.comment-body", "sourceUrl": "https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4", "sourcePath": "html:.markdown-body.comment-body", "text": "### Summary\n\nDue to an incomplete fix to CVE-2022-31629 , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.\n\n### Details\n\nThe vulnerability is identical to one previously described in https://bugs.php.net/bug.php?id=81727 . Unfortunatly, since CVE-2022-31629 got only partially fixed in PHP >8.1.11, cookies starting with _[Host- are parsed by PHP applications as __Host- . Notice that I reported this vulnerability multiple times via email after the fix for CVE-2022-31629 landed (I am the original reporter of that CVE), but I guess that the message got lost.", "truncated": false, "representation": "defensive_html_sections", "filtered": true }, { "evidenceId": "php:GHSA-wpj3-hf5j-x4v4:html:Package-Affected_versions-Patched_versions", "sourceUrl": "https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4", "sourcePath": "html:Package-Affected_versions-Patched_versions", "text": "{\"package\":{\"name\":\"php-src\"},\"vulnerable_version_range\":\"> 8.1.11, < 8.1.28\",\"patched_versions\":\"8.1.28\"}", "truncated": false, "representation": "normalized_html_fields" }, { "evidenceId": "php:GHSA-wpj3-hf5j-x4v4:html:Package-Affected_versions-Patched_versions", "sourceUrl": "https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4", "sourcePath": "html:Package-Affected_versions-Patched_versions", "text": "{\"package\":{\"name\":\"php-src\"},\"vulnerable_version_range\":\"< 8.2.18\",\"patched_versions\":\"8.2.18\"}", "truncated": false, "representation": "normalized_html_fields" }, { "evidenceId": "php:GHSA-wpj3-hf5j-x4v4:html:Package-Affected_versions-Patched_versions", "sourceUrl": "https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4", "sourcePath": "html:Package-Affected_versions-Patched_versions", "text": "{\"package\":{\"name\":\"php-src\"},\"vulnerable_version_range\":\"< 8.3.5\",\"patched_versions\":\"8.3.6\"}", "truncated": false, "representation": "normalized_html_fields" } ], "limits": { "completeness": "official_record_with_vendor_advisory", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 PHP開発元のアドバイザリ本文・明記された修正版を追加し、各抜粋の実際の取得元URLを保持しています。" }, "primaryModifiedAt": "2025-11-04T17:18:00.434Z", "supplementarySources": [ { "sourceType": "PHP Security", "sourceUrl": "https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4", "modifiedAt": null, "provider": "The PHP Group", "limits": { "completeness": "official_advisory", "truncatedFields": [], "note": "PHP開発元のアドバイザリです。要約・影響・対策と構造化された対象範囲・修正版を取得しています。攻撃実証コードと再現手順は除外しています。 APIの取得制限時に、同じ開発元の公開HTMLから本文・対象版・修正版を取得しています。HTMLで特定できない更新日時は未確認のままです。" } } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-11-04T17:18:00.434Z", "fetchedAt": "2026-10-24T06:16:54.869Z", "state": "published" }, { "source": "PHP Security", "modifiedAt": "2024-04-11T17:12:53.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceSummary": "PHPに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T06:16:54.869Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "13660a0307b68b0b2819b5769345d443141dce7fec2f72f9f53867470c731cbe", "sourceModifiedAt": "2025-11-04T17:18:00.434Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "CVE‑2022‑31629 の修正が不完全であるため、ネットワーク攻撃者や同一サイト攻撃者が被害者のブラウザーに標準の安全でないクッキーを設定でき、そのクッキーが PHP アプリケーションで __Host‑ または __Secure‑ クッキーとして扱われます。", "risk": "PHP アプリケーションは本来安全であるべきクッキーを不正に __Host‑ または __Secure‑ として扱う可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "ネットワーク攻撃者が被害者のブラウザーに標準の安全でないクッキーを設定できる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "同一サイト攻撃者が被害者のブラウザーに標準の安全でないクッキーを設定できる。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "PHP アプリケーションが受け取ったクッキーを __Host‑ または __Secure‑ クッキーとして処理する。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：PHP Group / PHP。影響ありとして記載：8.1系のうち、8.1.28未満。影響ありとして記載：8.2系のうち、8.2.18未満。影響ありとして記載：8.3系のうち、8.3.5未満。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json" ], "evidenceIds": [ "E3" ] }, { "text": "WordPressを使っている場合は、管理画面の「ツール」→「サイトヘルス」→「情報」→「サーバー」で「PHPバージョン」を控えます。PHPはサーバー側のソフトウェアなので、WordPress本体の更新だけではPHPの更新にはなりません。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://www.php.net/manual/en/install.general.php" ] }, { "text": "それ以外は、契約しているレンタルサーバーの管理画面で、対象ドメインに割り当てられたPHPの版を確認します。画面に番号が出ない場合は、ドメイン名と下の問い合わせ文をサーバー会社へ送ってください。複数のサイトがある場合は、サイトごとに確認します。", "kind": "procedure", "sourceUrls": [ "https://www.php.net/manual/en/install.general.php" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "自分でPHPの設定値を変更する前に、サーバー会社へ「このCVEに有効な回避策・副作用・修正予定」を確認してください。下の問い合わせ文を使えます。一般的なWAFやバックアップだけで修正済みとは扱わないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-2756", "https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4", "http://www.openwall.com/lists/oss-security/2024/04/12/11", "https://lists.debian.org/debian-lts-announce/2024/05/msg00005.html", "https://security.netapp.com/advisory/ntap-20240510-0008/" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後は、実際にWebサイトを動かしているPHPの版を管理画面・サイトヘルスで再確認し、ログインやフォーム送信などを試します。古い番号を保った修正パッケージの場合は、このCVEの修正が適用済みであることを提供元に確認してください。", "kind": "procedure", "sourceUrls": [ "https://wordpress.org/documentation/article/site-health-screen/", "https://access.redhat.com/solutions/57665" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json", "label": "CVE：php" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-2756", "label": "CVE公式レコード" }, { "url": "https://github.com/php/php-src/security/advisories/GHSA-wpj3-hf5j-x4v4", "label": "PHP開発元のアドバイザリ" }, { "url": "http://www.openwall.com/lists/oss-security/2024/04/12/11", "label": "CVE掲載の参考情報" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00005.html", "label": "CVE掲載の参考情報" }, { "url": "https://security.netapp.com/advisory/ntap-20240510-0008/", "label": "CVE掲載の参考情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://wordpress.org/documentation/article/site-health-screen/", "label": "WordPress公式：サイトヘルスの情報" }, { "url": "https://www.php.net/manual/en/install.general.php", "label": "PHP公式：実行環境とインストール" }, { "url": "https://www.php.net/supported-versions.php", "label": "PHP公式：サポート対象の系列" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json", "sourceField": "/containers/cna/title", "excerpt": "__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/2xxx/CVE-2024-2756.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"product\":\"PHP\",\"vendor\":\"PHP Group\",\"versions\":[{\"lessThan\":\"8.1.28\",\"status\":\"affected\",\"version\":\"8.1.*\",\"versionType\":\"semver\"},{\"lessThan\":\"8.2.18\",\"status\":\"affected\",\"version\":\"8.2.*\",\"versionType\":\"semver\"},{\"lessThan\":\"8.3.5\",\"status\":\"affected\",\"version\":\"8.3.*\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" } ], "supportRequest": "件名：CVE-2024-2756（PHP）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ネットワーク攻撃者が被害者のブラウザーに標準の安全でないクッキーを設定できる。\n・同一サイト攻撃者が被害者のブラウザーに標準の安全でないクッキーを設定できる。\n・PHP アプリケーションが受け取ったクッキーを __Host‑ または __Secure‑ クッキーとして処理する。\n・公式の対象表：PHP Group / PHP。影響ありとして記載：8.1系のうち、8.1.28未満。影響ありとして記載：8.2系のうち、8.2.18未満。影響ありとして記載：8.3系のうち、8.3.5未満。個別に例外が記されていない版も、原資料では影響ありとされています。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-2756", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T06:16:54.869Z", "lastSuccess": "2026-10-24T06:16:54.869Z", "sourceCheckedAt": "2026-10-24T06:16:54.869Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-3272", "aliases": [], "title": "DNS-320L / DNS-325 / DNS-327L / DNS-340L：脆弱性情報", "summary": "D-Link DNS-320L、DNS-325、DNS-327L、DNS-340L のファームウェア 20240403 において、/cgi-bin/nas_sharing.cgi の HTTP GET リクエストハンドラで、user パラメータに messagebus を指定して操作するとハードコードされた認証情報が露出し、リモートから攻撃が可能になる脆弱性です。", "risk": "攻撃者は認証されたコマンドインジェクションを実行でき、リモートで不正なコードを実行させられます。", "product": "DNS-320L / DNS-325 / DNS-327L / DNS-340L", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "VulDB", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "DNS-320L", "range": "20240403（機能: HTTP GET Request Handler）" }, { "product": "DNS-325", "range": "20240403（機能: HTTP GET Request Handler）" }, { "product": "DNS-327L", "range": "20240403（機能: HTTP GET Request Handler）" }, { "product": "DNS-340L", "range": "20240403（機能: HTTP GET Request Handler）" } ], "fixed": [], "steps": [ "本製品は既にエンド・オブ・ライフ（EOL）となっているため、機器を廃止し、代替機器に置き換える必要があります。", "「CVE-2024-3272」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "label": "CVE：VulDB" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-3272", "label": "CVE公式レコード" }, { "url": "https://vuldb.com/?id.259283", "label": "VDB-259283 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials" }, { "url": "https://vuldb.com/?ctiid.259283", "label": "VDB-259283 | CTI Indicators (IOB, IOC, TTP, IOA)" }, { "url": "https://github.com/netsecfish/dlink", "label": "CVE掲載の参考情報" }, { "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3272", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-04-04T01:00:05.740Z", "modifiedAt": "2025-10-21T23:05:22.378Z", "fetchedAt": "2026-10-24T05:18:10.582Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.", "sourceTitle": "D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "D-Link", "product": "DNS-320L", "versions": [ { "version": "20240403", "status": "affected" } ], "modules": [ "HTTP GET Request Handler" ] }, { "vendor": "D-Link", "product": "DNS-325", "versions": [ { "version": "20240403", "status": "affected" } ], "modules": [ "HTTP GET Request Handler" ] }, { "vendor": "D-Link", "product": "DNS-327L", "versions": [ { "version": "20240403", "status": "affected" } ], "modules": [ "HTTP GET Request Handler" ] }, { "vendor": "D-Link", "product": "DNS-340L", "versions": [ { "version": "20240403", "status": "affected" } ], "modules": [ "HTTP GET Request Handler" ] } ], "configurationNotes": "対象環境・機能: HTTP GET Request Handler。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-3272", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "fetchedAt": "2026-10-24T05:18:10.582Z", "publishedAt": "2024-04-04T01:00:05.740Z", "modifiedAt": "2025-10-21T23:05:22.378Z", "state": "published", "provider": "VulDB", "title": "D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials", "descriptions": [ { "lang": "en", "value": "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "de", "value": "Eine Schwachstelle wurde in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L bis 20240403 entdeckt. Sie wurde als sehr kritisch eingestuft. Betroffen davon ist ein unbekannter Prozess der Datei /cgi-bin/nas_sharing.cgi der Komponente HTTP GET Request Handler. Mit der Manipulation des Arguments user mit der Eingabe messagebus mit unbekannten Daten kann eine hard-coded credentials-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.", "sourcePath": "/containers/cna/descriptions/1/value" }, { "lang": "en", "value": "D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credential that allows an attacker to conduct authenticated command injection, leading to remote, unauthorized code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "D-Link", "product": "DNS-320L", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [ "HTTP GET Request Handler" ], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "20240403", "status": "affected" } ] }, { "vendor": "D-Link", "product": "DNS-325", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [ "HTTP GET Request Handler" ], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "20240403", "status": "affected" } ] }, { "vendor": "D-Link", "product": "DNS-327L", "sourcePath": "/containers/cna/affected/2", "platforms": [], "modules": [ "HTTP GET Request Handler" ], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "20240403", "status": "affected" } ] }, { "vendor": "D-Link", "product": "DNS-340L", "sourcePath": "/containers/cna/affected/3", "platforms": [], "modules": [ "HTTP GET Request Handler" ], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "20240403", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-798", "lang": "en", "description": "CWE-798 Hard-coded Credentials", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "VulDB", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" }, { "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "VulDB", "sourcePath": "/containers/cna/metrics/1/cvssV3_0" }, { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "baseScore": 10, "baseSeverity": "", "provider": "VulDB", "sourcePath": "/containers/cna/metrics/2/cvssV2_0" } ], "references": [ { "url": "https://vuldb.com/?id.259283", "label": "VDB-259283 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials", "tags": [ "vdb-entry", "technical-description", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://vuldb.com/?ctiid.259283", "label": "VDB-259283 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": [ "signature", "permissions-required", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://github.com/netsecfish/dlink", "label": "CVE", "tags": [ "exploit", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "label": "CVE", "tags": [ "related", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-3272", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"D-Link\",\"product\":\"DNS-320L\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"D-Link\",\"product\":\"DNS-325\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"D-Link\",\"product\":\"DNS-327L\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"D-Link\",\"product\":\"DNS-340L\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/descriptions/1/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourcePath": "/containers/cna/descriptions/1/value", "text": "Eine Schwachstelle wurde in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L bis 20240403 entdeckt. Sie wurde als sehr kritisch eingestuft. Betroffen davon ist ein unbekannter Prozess der Datei /cgi-bin/nas_sharing.cgi der Komponente HTTP GET Request Handler. Mit der Manipulation des Arguments user mit der Eingabe messagebus mit unbekannten Daten kann eine hard-coded credentials-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"CWE\",\"cweId\":\"CWE-798\",\"lang\":\"en\",\"description\":\"CWE-798 Hard-coded Credentials\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseScore\":9.8,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseSeverity\":\"CRITICAL\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV3_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourcePath": "/containers/cna/metrics/1/cvssV3_0", "text": "{\"version\":\"3.0\",\"baseScore\":9.8,\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseSeverity\":\"CRITICAL\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/2/cvssV2_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourcePath": "/containers/cna/metrics/2/cvssV2_0", "text": "{\"version\":\"2.0\",\"baseScore\":10,\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-3272:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272", "sourcePath": "retained:/originalText", "text": "D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credential that allows an attacker to conduct authenticated command injection, leading to remote, unauthorized code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-3272:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272", "sourcePath": "retained:/sourceAction", "text": "This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272", "modifiedAt": "2024-04-11T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:22.378Z", "fetchedAt": "2026-10-24T05:18:10.582Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-04-11T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.", "sourceSummary": "DNS-320L / DNS-325 / DNS-327L / DNS-340Lに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:18:10.582Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "4d325a909a5144c5c1acede862294303b0426d106db74d9998fa897117b95182", "sourceModifiedAt": "2025-10-21T23:05:22.378Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "D-Link DNS-320L、DNS-325、DNS-327L、DNS-340L のファームウェア 20240403 において、/cgi-bin/nas_sharing.cgi の HTTP GET リクエストハンドラで、user パラメータに messagebus を指定して操作するとハードコードされた認証情報が露出し、リモートから攻撃が可能になる脆弱性です。", "risk": "攻撃者は認証されたコマンドインジェクションを実行でき、リモートで不正なコードを実行させられます。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "攻撃者がネットワーク経由で HTTP GET リクエストを送信できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "リクエストの user パラメータに messagebus を指定して送信できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：D-Link / DNS-320L。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：D-Link / DNS-325。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：D-Link / DNS-327L。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：D-Link / DNS-340L。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json" ], "evidenceIds": [ "E7" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272" ], "evidenceIds": [ "E9" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json" ], "evidenceIds": [ "E4" ] }, { "text": "「DNS-320L / DNS-325 / DNS-327L / DNS-340L」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-3272", "https://vuldb.com/?id.259283", "https://vuldb.com/?ctiid.259283", "https://github.com/netsecfish/dlink", "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272", "https://nvd.nist.gov/vuln/detail/CVE-2024-3272" ] } ], "actions": [ { "text": "本製品は既にエンド・オブ・ライフ（EOL）となっているため、機器を廃止し、代替機器に置き換える必要があります。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272" ], "evidenceIds": [ "E8" ] }, { "text": "「CVE-2024-3272」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-3272", "https://vuldb.com/?id.259283", "https://vuldb.com/?ctiid.259283", "https://github.com/netsecfish/dlink", "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272", "https://nvd.nist.gov/vuln/detail/CVE-2024-3272" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-3272", "https://vuldb.com/?id.259283", "https://vuldb.com/?ctiid.259283", "https://github.com/netsecfish/dlink", "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272", "https://nvd.nist.gov/vuln/detail/CVE-2024-3272" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-3272", "https://vuldb.com/?id.259283", "https://vuldb.com/?ctiid.259283", "https://github.com/netsecfish/dlink", "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272", "https://nvd.nist.gov/vuln/detail/CVE-2024-3272" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-3272", "https://vuldb.com/?id.259283", "https://vuldb.com/?ctiid.259283", "https://github.com/netsecfish/dlink", "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272", "https://nvd.nist.gov/vuln/detail/CVE-2024-3272" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "label": "CVE：VulDB" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-3272", "label": "CVE公式レコード" }, { "url": "https://vuldb.com/?id.259283", "label": "VDB-259283 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials" }, { "url": "https://vuldb.com/?ctiid.259283", "label": "VDB-259283 | CTI Indicators (IOB, IOC, TTP, IOA)" }, { "url": "https://github.com/netsecfish/dlink", "label": "CVE掲載の参考情報" }, { "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3272", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourceField": "/containers/cna/title", "excerpt": "D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272", "sourceField": "retained:/originalText", "excerpt": "D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credential that allows an attacker to conduct authenticated command injection, leading to remote, unauthorized code execution.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"D-Link\",\"product\":\"DNS-320L\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"D-Link\",\"product\":\"DNS-325\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"D-Link\",\"product\":\"DNS-327L\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3272.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"D-Link\",\"product\":\"DNS-340L\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272", "sourceField": "retained:/sourceAction", "excerpt": "This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.", "language": null, "representation": "retained_feed_field" }, { "id": "E9", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3272", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-3272\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-3272（DNS-320L / DNS-325 / DNS-327L / DNS-340L）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者がネットワーク経由で HTTP GET リクエストを送信できること。\n・リクエストの user パラメータに messagebus を指定して送信できること。\n・公式の対象表：D-Link / DNS-320L。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler\n・公式の対象表：D-Link / DNS-325。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler\n・公式の対象表：D-Link / DNS-327L。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler\n・公式の対象表：D-Link / DNS-340L。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-3272", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:18:10.582Z", "lastSuccess": "2026-10-24T05:18:10.582Z", "sourceCheckedAt": "2026-10-24T05:18:10.582Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-3273", "aliases": [], "title": "DNS-320L / DNS-325 / DNS-327L / DNS-340L：脆弱性情報", "summary": "D-Link DNS-320L、DNS-325、DNS-327L、DNS-340L の HTTP GET Request ハンドラ（/cgi-bin/nas_sharing.cgi）において、system 引数を細工するとコマンドインジェクションが発生し、リモートから攻撃を実行できる脆弱性が確認されました。この脆弱性はクリティカルと評価され、エクスプロイトは公開されています。また、対象製品はすでにベンダーからサポートが終了していることが明記されています。", "risk": "攻撃者はリモートで任意のコマンドを実行でき、サーバー上で不正な処理が行われる可能性があります。", "product": "DNS-320L / DNS-325 / DNS-327L / DNS-340L", "category": "other", "component": "package", "severity": "high", "cvss": 7.3, "cvssVersion": "3.1", "cvssSource": "VulDB", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "affected": [ { "product": "DNS-320L", "range": "20240403（機能: HTTP GET Request Handler）" }, { "product": "DNS-325", "range": "20240403（機能: HTTP GET Request Handler）" }, { "product": "DNS-327L", "range": "20240403（機能: HTTP GET Request Handler）" }, { "product": "DNS-340L", "range": "20240403（機能: HTTP GET Request Handler）" } ], "fixed": [], "steps": [ "対象製品は廃止されているため、使用を中止し、代替機器に置き換えるべきです。", "「CVE-2024-3273」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "label": "CVE：VulDB" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-3273", "label": "CVE公式レコード" }, { "url": "https://vuldb.com/?id.259284", "label": "VDB-259284 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection" }, { "url": "https://vuldb.com/?ctiid.259284", "label": "VDB-259284 | CTI Indicators (IOB, IOC, TTP, IOA)" }, { "url": "https://vuldb.com/?submit.304661", "label": "Submit #304661 | D-LINK DNS-340L, DNS-320L, DNS-327L, DNS-325 Version 1.11, Version 1.00.0409.2013, Version 1.09, Versi" }, { "url": "https://github.com/netsecfish/dlink", "label": "CVE掲載の参考情報" }, { "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3273", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-04-04T01:00:06.842Z", "modifiedAt": "2025-10-21T23:05:22.196Z", "fetchedAt": "2026-10-24T08:03:58.324Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.", "sourceTitle": "D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "D-Link", "product": "DNS-320L", "versions": [ { "version": "20240403", "status": "affected" } ], "modules": [ "HTTP GET Request Handler" ] }, { "vendor": "D-Link", "product": "DNS-325", "versions": [ { "version": "20240403", "status": "affected" } ], "modules": [ "HTTP GET Request Handler" ] }, { "vendor": "D-Link", "product": "DNS-327L", "versions": [ { "version": "20240403", "status": "affected" } ], "modules": [ "HTTP GET Request Handler" ] }, { "vendor": "D-Link", "product": "DNS-340L", "versions": [ { "version": "20240403", "status": "affected" } ], "modules": [ "HTTP GET Request Handler" ] } ], "configurationNotes": "対象環境・機能: HTTP GET Request Handler。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-3273", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "fetchedAt": "2026-10-24T08:03:58.324Z", "publishedAt": "2024-04-04T01:00:06.842Z", "modifiedAt": "2025-10-21T23:05:22.196Z", "state": "published", "provider": "VulDB", "title": "D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection", "descriptions": [ { "lang": "en", "value": "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "de", "value": "Es wurde eine Schwachstelle in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L bis 20240403 gefunden. Sie wurde als kritisch eingestuft. Betroffen hiervon ist ein unbekannter Ablauf der Datei /cgi-bin/nas_sharing.cgi der Komponente HTTP GET Request Handler. Durch die Manipulation des Arguments system mit unbekannten Daten kann eine command injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung.", "sourcePath": "/containers/cna/descriptions/1/value" }, { "lang": "en", "value": "D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When combined with CVE-2024-3272, this can lead to remote, unauthorized code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "D-Link", "product": "DNS-320L", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [ "HTTP GET Request Handler" ], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "20240403", "status": "affected" } ] }, { "vendor": "D-Link", "product": "DNS-325", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [ "HTTP GET Request Handler" ], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "20240403", "status": "affected" } ] }, { "vendor": "D-Link", "product": "DNS-327L", "sourcePath": "/containers/cna/affected/2", "platforms": [], "modules": [ "HTTP GET Request Handler" ], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "20240403", "status": "affected" } ] }, { "vendor": "D-Link", "product": "DNS-340L", "sourcePath": "/containers/cna/affected/3", "platforms": [], "modules": [ "HTTP GET Request Handler" ], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "20240403", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-77", "lang": "en", "description": "CWE-77 Command Injection", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "baseScore": 7.3, "baseSeverity": "HIGH", "provider": "VulDB", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" }, { "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "baseScore": 7.3, "baseSeverity": "HIGH", "provider": "VulDB", "sourcePath": "/containers/cna/metrics/1/cvssV3_0" }, { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "baseScore": 7.5, "baseSeverity": "", "provider": "VulDB", "sourcePath": "/containers/cna/metrics/2/cvssV2_0" } ], "references": [ { "url": "https://vuldb.com/?id.259284", "label": "VDB-259284 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection", "tags": [ "vdb-entry", "technical-description", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://vuldb.com/?ctiid.259284", "label": "VDB-259284 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": [ "signature", "permissions-required", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://vuldb.com/?submit.304661", "label": "Submit #304661 | D-LINK DNS-340L, DNS-320L, DNS-327L, DNS-325 Version 1.11, Version 1.00.0409.2013, Version 1.09, Version 1.08, Version 1.03.0904.2013, Version 1.01 Command Injection, Backdoor Account", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://github.com/netsecfish/dlink", "label": "CVE", "tags": [ "exploit", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "label": "CVE", "tags": [ "related", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "https://www.greynoise.io/blog/cve-2024-3273-d-link-nas-rce-exploited-in-the-wild", "label": "CISA-ADP", "tags": [], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-3273", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"D-Link\",\"product\":\"DNS-320L\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"D-Link\",\"product\":\"DNS-325\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"D-Link\",\"product\":\"DNS-327L\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"D-Link\",\"product\":\"DNS-340L\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/descriptions/1/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourcePath": "/containers/cna/descriptions/1/value", "text": "Es wurde eine Schwachstelle in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L bis 20240403 gefunden. Sie wurde als kritisch eingestuft. Betroffen hiervon ist ein unbekannter Ablauf der Datei /cgi-bin/nas_sharing.cgi der Komponente HTTP GET Request Handler. Durch die Manipulation des Arguments system mit unbekannten Daten kann eine command injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"CWE\",\"cweId\":\"CWE-77\",\"lang\":\"en\",\"description\":\"CWE-77 Command Injection\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseScore\":7.3,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\",\"baseSeverity\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV3_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourcePath": "/containers/cna/metrics/1/cvssV3_0", "text": "{\"version\":\"3.0\",\"baseScore\":7.3,\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\",\"baseSeverity\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/2/cvssV2_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourcePath": "/containers/cna/metrics/2/cvssV2_0", "text": "{\"version\":\"2.0\",\"baseScore\":7.5,\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-3273:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "sourcePath": "retained:/originalText", "text": "D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When combined with CVE-2024-3272, this can lead to remote, unauthorized code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-3273:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "sourcePath": "retained:/sourceAction", "text": "This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "modifiedAt": "2024-04-11T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:22.196Z", "fetchedAt": "2026-10-24T08:03:58.324Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-04-11T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "state": "published" } ], "sourceAction": "This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.", "sourceSummary": "DNS-320L / DNS-325 / DNS-327L / DNS-340Lに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:03:58.324Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e38da0acfea78146983238943ae5fd0a5792c8b3763be2da2400a78b4ad198ba", "sourceModifiedAt": "2025-10-21T23:05:22.196Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "D-Link DNS-320L、DNS-325、DNS-327L、DNS-340L の HTTP GET Request ハンドラ（/cgi-bin/nas_sharing.cgi）において、system 引数を細工するとコマンドインジェクションが発生し、リモートから攻撃を実行できる脆弱性が確認されました。この脆弱性はクリティカルと評価され、エクスプロイトは公開されています。また、対象製品はすでにベンダーからサポートが終了していることが明記されています。", "risk": "攻撃者はリモートで任意のコマンドを実行でき、サーバー上で不正な処理が行われる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "攻撃はネットワーク経由で実行可能です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃者は HTTP GET リクエストで nas_sharing.cgi の system パラメータに任意のデータを送信できる必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "対象は D-Link DNS-320L、DNS-325、DNS-327L、DNS-340L のファームウェアバージョン 20240403 です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json" ], "evidenceIds": [ "E4", "E5", "E6", "E7", "E2" ] }, { "text": "対象製品はベンダーからサポートが終了しており、レガシー製品です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273" ], "evidenceIds": [ "E1", "E8", "E2" ] }, { "text": "この脆弱性は既に公開されているエクスプロイトが存在し、実際に悪用されたことが確認されています。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json" ], "evidenceIds": [ "E3", "E9", "E2" ] }, { "text": "公式の対象表：D-Link / DNS-320L。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：D-Link / DNS-325。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：D-Link / DNS-327L。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：D-Link / DNS-340L。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json" ], "evidenceIds": [ "E7" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273" ], "evidenceIds": [ "E9" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json" ], "evidenceIds": [ "E4" ] }, { "text": "「DNS-320L / DNS-325 / DNS-327L / DNS-340L」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-3273", "https://vuldb.com/?id.259284", "https://vuldb.com/?ctiid.259284", "https://vuldb.com/?submit.304661", "https://github.com/netsecfish/dlink", "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "https://nvd.nist.gov/vuln/detail/CVE-2024-3273" ] } ], "actions": [ { "text": "対象製品は廃止されているため、使用を中止し、代替機器に置き換えるべきです。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273" ], "evidenceIds": [ "E8" ] }, { "text": "「CVE-2024-3273」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-3273", "https://vuldb.com/?id.259284", "https://vuldb.com/?ctiid.259284", "https://vuldb.com/?submit.304661", "https://github.com/netsecfish/dlink", "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "https://nvd.nist.gov/vuln/detail/CVE-2024-3273" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-3273", "https://vuldb.com/?id.259284", "https://vuldb.com/?ctiid.259284", "https://vuldb.com/?submit.304661", "https://github.com/netsecfish/dlink", "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "https://nvd.nist.gov/vuln/detail/CVE-2024-3273" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-3273", "https://vuldb.com/?id.259284", "https://vuldb.com/?ctiid.259284", "https://vuldb.com/?submit.304661", "https://github.com/netsecfish/dlink", "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "https://nvd.nist.gov/vuln/detail/CVE-2024-3273" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-3273", "https://vuldb.com/?id.259284", "https://vuldb.com/?ctiid.259284", "https://vuldb.com/?submit.304661", "https://github.com/netsecfish/dlink", "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "https://nvd.nist.gov/vuln/detail/CVE-2024-3273" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "label": "CVE：VulDB" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-3273", "label": "CVE公式レコード" }, { "url": "https://vuldb.com/?id.259284", "label": "VDB-259284 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection" }, { "url": "https://vuldb.com/?ctiid.259284", "label": "VDB-259284 | CTI Indicators (IOB, IOC, TTP, IOA)" }, { "url": "https://vuldb.com/?submit.304661", "label": "Submit #304661 | D-LINK DNS-340L, DNS-320L, DNS-327L, DNS-325 Version 1.11, Version 1.00.0409.2013, Version 1.09, Versi" }, { "url": "https://github.com/netsecfish/dlink", "label": "CVE掲載の参考情報" }, { "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3273", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourceField": "/containers/cna/title", "excerpt": "D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "sourceField": "retained:/originalText", "excerpt": "D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When combined with CVE-2024-3272, this can lead to remote, unauthorized code execution.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"D-Link\",\"product\":\"DNS-320L\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"D-Link\",\"product\":\"DNS-325\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"D-Link\",\"product\":\"DNS-327L\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/3xxx/CVE-2024-3273.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"D-Link\",\"product\":\"DNS-340L\",\"versions\":[{\"version\":\"20240403\",\"status\":\"affected\"}],\"modules\":[\"HTTP GET Request Handler\"]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "sourceField": "retained:/sourceAction", "excerpt": "This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.", "language": null, "representation": "retained_feed_field" }, { "id": "E9", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-3273", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-3273\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-3273（DNS-320L / DNS-325 / DNS-327L / DNS-340L）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃はネットワーク経由で実行可能です。\n・攻撃者は HTTP GET リクエストで nas_sharing.cgi の system パラメータに任意のデータを送信できる必要があります。\n・対象は D-Link DNS-320L、DNS-325、DNS-327L、DNS-340L のファームウェアバージョン 20240403 です。\n・対象製品はベンダーからサポートが終了しており、レガシー製品です。\n・この脆弱性は既に公開されているエクスプロイトが存在し、実際に悪用されたことが確認されています。\n・公式の対象表：D-Link / DNS-320L。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler\n・公式の対象表：D-Link / DNS-325。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler\n・公式の対象表：D-Link / DNS-327L。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler\n・公式の対象表：D-Link / DNS-340L。影響ありとして記載：20240403。対象の機能：HTTP GET Request Handler\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-3273", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:03:58.324Z", "lastSuccess": "2026-10-24T08:03:58.324Z", "sourceCheckedAt": "2026-10-24T08:03:58.324Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-29745", "aliases": [], "title": "Android：情報の漏えい", "summary": "未初期化データに起因する情報漏洩の可能性があり、追加の実行権限やユーザー操作なしにローカル情報が漏洩する可能性があります。", "risk": "ローカルの情報が漏洩する可能性があります。", "product": "Android", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "Google_Devices", "cvssVector": null, "affected": [ { "product": "Android", "range": "Android kernel" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2024-29745」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json", "label": "CVE：Google_Devices" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-29745", "label": "CVE公式レコード" }, { "url": "https://source.android.com/security/bulletin/pixel/2024-04-01", "label": "CVE掲載の参考情報" }, { "url": "https://source.android.com/docs/security/bulletin/pixel/2024-04-01", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29745", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-04-05T20:02:15.995Z", "modifiedAt": "2025-10-21T23:05:22.006Z", "fetchedAt": "2026-10-24T05:18:23.216Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Google", "product": "Android", "versions": [ { "version": "Android kernel", "status": "affected" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-29745", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json", "fetchedAt": "2026-10-24T05:18:23.216Z", "publishedAt": "2024-04-05T20:02:15.995Z", "modifiedAt": "2025-10-21T23:05:22.006Z", "state": "published", "provider": "Google_Devices", "title": "", "descriptions": [ { "lang": "en", "value": "there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Google", "product": "Android", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "Android kernel", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Information disclosure", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://source.android.com/security/bulletin/pixel/2024-04-01", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://twitter.com/GrapheneOS/status/1775306481622995226", "label": "CISA-ADP", "tags": [ "issue-tracking" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29745", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Google\",\"product\":\"Android\",\"versions\":[{\"version\":\"Android kernel\",\"status\":\"affected\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Information disclosure\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":5.5,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"integrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-29745:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "sourcePath": "retained:/originalText", "text": "Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-29745:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "modifiedAt": "2024-04-04T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:22.006Z", "fetchedAt": "2026-10-24T05:18:23.216Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-04-04T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Androidに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来公開しない情報を読み取られる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:18:23.216Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "b69429487a81370bf126df15fd33c9d60f588aa56d719e77f62a2f3ad68f430c", "sourceModifiedAt": "2025-10-21T23:05:22.006Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "未初期化データに起因する情報漏洩の可能性があり、追加の実行権限やユーザー操作なしにローカル情報が漏洩する可能性があります。", "risk": "ローカルの情報が漏洩する可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃にユーザー操作は不要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json" ], "evidenceIds": [ "E1" ] }, { "text": "追加の実行権限は不要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json" ], "evidenceIds": [ "E1" ] }, { "text": "Android Pixel の fastboot ファームウェア（Android カーネル）に影響します。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json" ], "evidenceIds": [ "E2", "E3" ] }, { "text": "公式の対象表：Google / Android。影響ありとして記載：Android kernel。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Android」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-29745", "https://source.android.com/security/bulletin/pixel/2024-04-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "https://source.android.com/docs/security/bulletin/pixel/2024-04-01", "https://nvd.nist.gov/vuln/detail/CVE-2024-29745" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745" ], "evidenceIds": [ "E4", "E5" ] }, { "text": "「CVE-2024-29745」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-29745", "https://source.android.com/security/bulletin/pixel/2024-04-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "https://source.android.com/docs/security/bulletin/pixel/2024-04-01", "https://nvd.nist.gov/vuln/detail/CVE-2024-29745" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-29745", "https://source.android.com/security/bulletin/pixel/2024-04-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "https://source.android.com/docs/security/bulletin/pixel/2024-04-01", "https://nvd.nist.gov/vuln/detail/CVE-2024-29745" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-29745", "https://source.android.com/security/bulletin/pixel/2024-04-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "https://source.android.com/docs/security/bulletin/pixel/2024-04-01", "https://nvd.nist.gov/vuln/detail/CVE-2024-29745" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-29745", "https://source.android.com/security/bulletin/pixel/2024-04-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "https://source.android.com/docs/security/bulletin/pixel/2024-04-01", "https://nvd.nist.gov/vuln/detail/CVE-2024-29745" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json", "label": "CVE：Google_Devices" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-29745", "label": "CVE公式レコード" }, { "url": "https://source.android.com/security/bulletin/pixel/2024-04-01", "label": "CVE掲載の参考情報" }, { "url": "https://source.android.com/docs/security/bulletin/pixel/2024-04-01", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29745", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "sourceField": "retained:/originalText", "excerpt": "Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29745.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Google\",\"product\":\"Android\",\"versions\":[{\"version\":\"Android kernel\",\"status\":\"affected\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29745", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-29745\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-29745（Android）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃にユーザー操作は不要です。\n・追加の実行権限は不要です。\n・Android Pixel の fastboot ファームウェア（Android カーネル）に影響します。\n・公式の対象表：Google / Android。影響ありとして記載：Android kernel。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-29745", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:18:23.216Z", "lastSuccess": "2026-10-24T05:18:23.216Z", "sourceCheckedAt": "2026-10-24T05:18:23.216Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-29748", "aliases": [], "title": "Android：脆弱性情報", "summary": "コードの論理エラーによりバイパスできる可能性があり、追加の実行権限なしでローカルで権限昇格が起こり得ます。悪用にはユーザーの操作が必要です。", "risk": "ローカルで権限が昇格する可能性があります。", "product": "Android", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "Google_Devices", "cvssVector": null, "affected": [ { "product": "Android", "range": "Android kernel" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2024-29748」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29748.json", "label": "CVE：Google_Devices" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-29748", "label": "CVE公式レコード" }, { "url": "https://source.android.com/security/bulletin/pixel/2024-04-01", "label": "CVE掲載の参考情報" }, { "url": "https://source.android.com/docs/security/bulletin/pixel/2024-04-01", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29748", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-04-05T20:02:16.425Z", "modifiedAt": "2025-10-21T23:05:21.822Z", "fetchedAt": "2026-10-24T05:18:34.051Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Google", "product": "Android", "versions": [ { "version": "Android kernel", "status": "affected" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-29748", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29748.json", "fetchedAt": "2026-10-24T05:18:34.051Z", "publishedAt": "2024-04-05T20:02:16.425Z", "modifiedAt": "2025-10-21T23:05:21.822Z", "state": "published", "provider": "Google_Devices", "title": "", "descriptions": [ { "lang": "en", "value": "there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Google", "product": "Android", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "Android kernel", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Elevation of privilege", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://source.android.com/security/bulletin/pixel/2024-04-01", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://twitter.com/GrapheneOS/status/1775308208472813609", "label": "CISA-ADP", "tags": [ "issue-tracking" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29748", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29748.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Google\",\"product\":\"Android\",\"versions\":[{\"version\":\"Android kernel\",\"status\":\"affected\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29748.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29748.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Elevation of privilege\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29748.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-29748:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "sourcePath": "retained:/originalText", "text": "Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-29748:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "modifiedAt": "2024-04-04T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:21.822Z", "fetchedAt": "2026-10-24T05:18:34.051Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-04-04T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Androidに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:18:34.051Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "4fa74d5f12dbe096efaffeca1a291bd725abe453ef04658b755f1ff1c2686b78", "sourceModifiedAt": "2025-10-21T23:05:21.822Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "コードの論理エラーによりバイパスできる可能性があり、追加の実行権限なしでローカルで権限昇格が起こり得ます。悪用にはユーザーの操作が必要です。", "risk": "ローカルで権限が昇格する可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者はユーザーの操作が必要で、追加の実行権限は不要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29748.json" ], "evidenceIds": [ "E1" ] }, { "text": "影響を受けるのは Android カーネルで、Android Pixel デバイスにおいて、デバイス管理アプリが開始したファクトリーリセットを攻撃者が中断できる。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29748.json" ], "evidenceIds": [ "E2", "E3" ] }, { "text": "公式の対象表：Google / Android。影響ありとして記載：Android kernel。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29748.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29748.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Android」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-29748", "https://source.android.com/security/bulletin/pixel/2024-04-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "https://source.android.com/docs/security/bulletin/pixel/2024-04-01", "https://nvd.nist.gov/vuln/detail/CVE-2024-29748" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2024-29748」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-29748", "https://source.android.com/security/bulletin/pixel/2024-04-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "https://source.android.com/docs/security/bulletin/pixel/2024-04-01", "https://nvd.nist.gov/vuln/detail/CVE-2024-29748" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-29748", "https://source.android.com/security/bulletin/pixel/2024-04-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "https://source.android.com/docs/security/bulletin/pixel/2024-04-01", "https://nvd.nist.gov/vuln/detail/CVE-2024-29748" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-29748", "https://source.android.com/security/bulletin/pixel/2024-04-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "https://source.android.com/docs/security/bulletin/pixel/2024-04-01", "https://nvd.nist.gov/vuln/detail/CVE-2024-29748" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29748.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-29748", "https://source.android.com/security/bulletin/pixel/2024-04-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "https://source.android.com/docs/security/bulletin/pixel/2024-04-01", "https://nvd.nist.gov/vuln/detail/CVE-2024-29748" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29748.json", "label": "CVE：Google_Devices" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-29748", "label": "CVE公式レコード" }, { "url": "https://source.android.com/security/bulletin/pixel/2024-04-01", "label": "CVE掲載の参考情報" }, { "url": "https://source.android.com/docs/security/bulletin/pixel/2024-04-01", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29748", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29748.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "sourceField": "retained:/originalText", "excerpt": "Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/29xxx/CVE-2024-29748.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Google\",\"product\":\"Android\",\"versions\":[{\"version\":\"Android kernel\",\"status\":\"affected\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-29748", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-29748\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-29748（Android）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者はユーザーの操作が必要で、追加の実行権限は不要です。\n・影響を受けるのは Android カーネルで、Android Pixel デバイスにおいて、デバイス管理アプリが開始したファクトリーリセットを攻撃者が中断できる。\n・公式の対象表：Google / Android。影響ありとして記載：Android kernel。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-29748", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:18:34.051Z", "lastSuccess": "2026-10-24T05:18:34.051Z", "sourceCheckedAt": "2026-10-24T05:18:34.051Z", "errorCode": null }, "glossary": [ { "term": "権限昇格", "meaning": "本来その利用者には許可されていない、より強い権限で操作できるようになることです。必要な元の権限と、得られる権限を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/269.html", "kind": "general_definition" } ] } }, { "id": "CVE-2023-24955", "aliases": [], "title": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition：コード実行", "summary": "Microsoft SharePoint Server にコードインジェクションの脆弱性があり、Site Owner 権限を持つ認証済みの攻撃者がリモートでコードを実行できる可能性があります。", "risk": "攻撃者がリモートでコードを実行できる状態になります。", "product": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition", "category": "windows", "component": "package", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "affected": [ { "product": "Microsoft SharePoint Enterprise Server 2016", "range": ">= 16.0.0 / < 16.0.5395.1000（環境: x64-based Systems）" }, { "product": "Microsoft SharePoint Server 2019", "range": ">= 16.0.0 / < 16.0.10398.20000（環境: x64-based Systems）" }, { "product": "Microsoft SharePoint Server Subscription Edition", "range": ">= 16.0.0 / < 16.0.16130.20420（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-24955", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24955", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24955", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2023-05-09T17:03:01.864Z", "modifiedAt": "2025-10-21T23:05:47.942Z", "fetchedAt": "2026-10-24T05:18:47.638Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Microsoft SharePoint Server Remote Code Execution Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "16.0.0", "lessThan": "16.0.5395.1000", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "16.0.0", "lessThan": "16.0.10398.20000", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "16.0.0", "lessThan": "16.0.16130.20420", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: x64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-24955", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json", "fetchedAt": "2026-10-24T05:18:47.638Z", "publishedAt": "2023-05-09T17:03:01.864Z", "modifiedAt": "2025-10-21T23:05:47.942Z", "state": "published", "provider": "microsoft", "title": "Microsoft SharePoint Server Remote Code Execution Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Microsoft SharePoint Server Remote Code Execution Vulnerability", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Microsoft", "product": "Microsoft SharePoint Enterprise Server 2016", "sourcePath": "/containers/cna/affected/0", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "16.0.0", "lessThan": "16.0.5395.1000", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server 2019", "sourcePath": "/containers/cna/affected/1", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "16.0.0", "lessThan": "16.0.10398.20000", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Microsoft SharePoint Server Subscription Edition", "sourcePath": "/containers/cna/affected/2", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "16.0.0", "lessThan": "16.0.16130.20420", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-94", "lang": "en-US", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "baseScore": 7.2, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24955", "label": "Microsoft SharePoint Server Remote Code Execution Vulnerability", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-24955", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Enterprise Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.5395.1000\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.10398.20000\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server Subscription Edition\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.16130.20420\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Microsoft SharePoint Server Remote Code Execution Vulnerability", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-94: Improper Control of Generation of Code ('Code Injection')\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-94\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.2,\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-24955:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955", "sourcePath": "retained:/originalText", "text": "Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-24955:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955", "modifiedAt": "2024-03-26T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:47.942Z", "fetchedAt": "2026-10-24T05:18:47.638Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-03-26T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Editionにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:18:47.638Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "fcfe75723e0e5af75c0974efef7309c00cdb9a3b496781306b22e260b556c05c", "sourceModifiedAt": "2025-10-21T23:05:47.942Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft SharePoint Server にコードインジェクションの脆弱性があり、Site Owner 権限を持つ認証済みの攻撃者がリモートでコードを実行できる可能性があります。", "risk": "攻撃者がリモートでコードを実行できる状態になります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "認証された攻撃者が Site Owner 権限を持っている場合にこの脆弱性を利用できます。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "対象は Microsoft SharePoint Server（Enterprise Server 2016、Server 2019、Server Subscription Edition）の x64 ベース システムです。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Microsoft / Microsoft SharePoint Enterprise Server 2016。影響ありとして記載：16.0.0以上、16.0.5395.1000未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Microsoft / Microsoft SharePoint Server 2019。影響ありとして記載：16.0.0以上、16.0.10398.20000未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Microsoft SharePoint Server Subscription Edition。影響ありとして記載：16.0.0以上、16.0.16130.20420未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json" ], "evidenceIds": [ "E5" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-24955", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24955", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955", "https://nvd.nist.gov/vuln/detail/CVE-2023-24955" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955" ], "evidenceIds": [ "E6" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-24955", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24955", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955", "https://nvd.nist.gov/vuln/detail/CVE-2023-24955" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-24955", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24955", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24955", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955", "sourceField": "retained:/originalText", "excerpt": "Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.", "language": "en", "representation": "retained_feed_field" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json", "sourceField": "/containers/cna/title", "excerpt": "Microsoft SharePoint Server Remote Code Execution Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Enterprise Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.5395.1000\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.10398.20000\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/24xxx/CVE-2023-24955.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Microsoft SharePoint Server Subscription Edition\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"16.0.0\",\"lessThan\":\"16.0.16130.20420\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-24955", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-24955\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-24955（Microsoft SharePoint Enterprise Server 2016 / Microsoft SharePoint Server 2019 / Microsoft SharePoint Server Subscription Edition）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証された攻撃者が Site Owner 権限を持っている場合にこの脆弱性を利用できます。\n・対象は Microsoft SharePoint Server（Enterprise Server 2016、Server 2019、Server Subscription Edition）の x64 ベース システムです。\n・公式の対象表：Microsoft / Microsoft SharePoint Enterprise Server 2016。影響ありとして記載：16.0.0以上、16.0.5395.1000未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft SharePoint Server 2019。影響ありとして記載：16.0.0以上、16.0.10398.20000未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Microsoft SharePoint Server Subscription Edition。影響ありとして記載：16.0.0以上、16.0.16130.20420未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-24955", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:18:47.638Z", "lastSuccess": "2026-10-24T05:18:47.638Z", "sourceCheckedAt": "2026-10-24T05:18:47.638Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2019-7256", "aliases": [], "title": "n/a：脆弱性情報", "summary": "Nice Linear eMerge E3-Series には OS コマンドインジェクションの脆弱性があり、攻撃者はリモートでコードを実行できる可能性があります。", "risk": "攻撃者がデバイス上で任意のコードを実行できるため、システムが乗っ取られる危険があります。", "product": "Nice Linear eMerge E3-Series", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "ベンダーに連絡し、ファームウェアの修正方法について助言を求めてください。", "「CVE-2019-7256」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/7xxx/CVE-2019-7256.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-7256", "label": "CVE公式レコード" }, { "url": "https://applied-risk.com/labs/advisories", "label": "CVE掲載の参考情報" }, { "url": "https://www.applied-risk.com/resources/ar-2019-005", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html", "label": "CVE掲載の参考情報" }, { "url": "https://linear-solutions.com/wp-content/uploads/E3-Bulletin-06-27-2023.pdf", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-065-01", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7256", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2019-07-02T00:00:00.000Z", "modifiedAt": "2025-10-21T23:45:34.488Z", "fetchedAt": "2026-10-24T06:17:24.023Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Linear eMerge E3-Series devices allow Command Injections.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2019-7256", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/7xxx/CVE-2019-7256.json", "fetchedAt": "2026-10-24T06:17:24.023Z", "publishedAt": "2019-07-02T00:00:00.000Z", "modifiedAt": "2025-10-21T23:45:34.488Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "Linear eMerge E3-Series devices allow Command Injections.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://applied-risk.com/labs/advisories", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.applied-risk.com/resources/ar-2019-005", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7256", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/7xxx/CVE-2019-7256.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/7xxx/CVE-2019-7256.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Linear eMerge E3-Series devices allow Command Injections.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/7xxx/CVE-2019-7256.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/7xxx/CVE-2019-7256.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":9.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2019-7256:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256", "sourcePath": "retained:/originalText", "text": "Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2019-7256:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256", "sourcePath": "retained:/sourceAction", "text": "Contact the vendor for guidance on remediating firmware, per their advisory.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256", "modifiedAt": "2024-03-25T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:45:34.488Z", "fetchedAt": "2026-10-24T06:17:24.023Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-03-25T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Contact the vendor for guidance on remediating firmware, per their advisory.", "sourceSummary": "n/aに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T06:17:24.023Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "b2a2917a8348256f2c382f41734e3fc0074c5618f87b694641bf39695b9eeedd", "sourceModifiedAt": "2025-10-21T23:45:34.488Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Nice Linear eMerge E3-Series には OS コマンドインジェクションの脆弱性があり、攻撃者はリモートでコードを実行できる可能性があります。", "risk": "攻撃者がデバイス上で任意のコードを実行できるため、システムが乗っ取られる危険があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/7xxx/CVE-2019-7256.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/7xxx/CVE-2019-7256.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Nice Linear eMerge E3-Series」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2019-7256", "https://applied-risk.com/labs/advisories", "https://www.applied-risk.com/resources/ar-2019-005", "http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html", "http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html", "http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html", "http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256", "https://linear-solutions.com/wp-content/uploads/E3-Bulletin-06-27-2023.pdf", "https://www.cisa.gov/news-events/ics-advisories/icsa-24-065-01", "https://nvd.nist.gov/vuln/detail/CVE-2019-7256" ] } ], "actions": [ { "text": "ベンダーに連絡し、ファームウェアの修正方法について助言を求めてください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2019-7256」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2019-7256", "https://applied-risk.com/labs/advisories", "https://www.applied-risk.com/resources/ar-2019-005", "http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html", "http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html", "http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html", "http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256", "https://linear-solutions.com/wp-content/uploads/E3-Bulletin-06-27-2023.pdf", "https://www.cisa.gov/news-events/ics-advisories/icsa-24-065-01", "https://nvd.nist.gov/vuln/detail/CVE-2019-7256" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2019-7256", "https://applied-risk.com/labs/advisories", "https://www.applied-risk.com/resources/ar-2019-005", "http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html", "http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html", "http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html", "http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256", "https://linear-solutions.com/wp-content/uploads/E3-Bulletin-06-27-2023.pdf", "https://www.cisa.gov/news-events/ics-advisories/icsa-24-065-01", "https://nvd.nist.gov/vuln/detail/CVE-2019-7256" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2019-7256", "https://applied-risk.com/labs/advisories", "https://www.applied-risk.com/resources/ar-2019-005", "http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html", "http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html", "http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html", "http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256", "https://linear-solutions.com/wp-content/uploads/E3-Bulletin-06-27-2023.pdf", "https://www.cisa.gov/news-events/ics-advisories/icsa-24-065-01", "https://nvd.nist.gov/vuln/detail/CVE-2019-7256" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/7xxx/CVE-2019-7256.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2019-7256", "https://applied-risk.com/labs/advisories", "https://www.applied-risk.com/resources/ar-2019-005", "http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html", "http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html", "http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html", "http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256", "https://linear-solutions.com/wp-content/uploads/E3-Bulletin-06-27-2023.pdf", "https://www.cisa.gov/news-events/ics-advisories/icsa-24-065-01", "https://nvd.nist.gov/vuln/detail/CVE-2019-7256" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/7xxx/CVE-2019-7256.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2019-7256", "label": "CVE公式レコード" }, { "url": "https://applied-risk.com/labs/advisories", "label": "CVE掲載の参考情報" }, { "url": "https://www.applied-risk.com/resources/ar-2019-005", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/155255/Linear-eMerge-E3-1.00-06-card_scan.php-Command-Injection.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/155256/Linear-eMerge-E3-1.00-06-card_scan_decoder.php-Command-Injection.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/155272/Linear-eMerge-E3-Access-Controller-Command-Injection.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/170372/Linear-eMerge-E3-Series-Access-Controller-Command-Injection.html", "label": "CVE掲載の参考情報" }, { "url": "https://linear-solutions.com/wp-content/uploads/E3-Bulletin-06-27-2023.pdf", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-065-01", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7256", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/7xxx/CVE-2019-7256.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Linear eMerge E3-Series devices allow Command Injections.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256", "sourceField": "retained:/originalText", "excerpt": "Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2019/7xxx/CVE-2019-7256.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256", "sourceField": "retained:/sourceAction", "excerpt": "Contact the vendor for guidance on remediating firmware, per their advisory.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7256", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2019-7256\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2019-7256（Nice Linear eMerge E3-Series）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2019-7256", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T06:17:24.023Z", "lastSuccess": "2026-10-24T06:17:24.023Z", "sourceCheckedAt": "2026-10-24T06:17:24.023Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2021-44529", "aliases": [], "title": "Ivanti EPM：コード実行", "summary": "Ivanti EPM Cloud Services Appliance (CSA) にコードインジェクション脆弱性があり、認証されていないユーザーが「nobody」権限の制限された権限で任意のコードを実行できる。", "risk": "攻撃者は制限された権限で悪意のあるコードを実行できるため、システム上で不正な処理が行われる可能性がある。", "product": "Ivanti EPM", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "hackerone", "cvssVector": null, "affected": [ { "product": "Ivanti EPM", "range": "4.6.0-512" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "「CVE-2021-44529」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/44xxx/CVE-2021-44529.json", "label": "CVE：hackerone" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-44529", "label": "CVE公式レコード" }, { "url": "https://forums.ivanti.com/s/article/SA-2021-12-02", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.html", "label": "CVE掲載の参考情報" }, { "url": "https://forums.ivanti.com/s/article/SA-2021-12-02?language=en_US", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44529", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2021-12-08T00:00:00.000Z", "modifiedAt": "2026-08-04T03:55:34.087Z", "fetchedAt": "2026-10-24T05:18:51.393Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "Ivanti EPM", "versions": [ { "version": "4.6.0-512", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2021-44529", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/44xxx/CVE-2021-44529.json", "fetchedAt": "2026-10-24T05:18:51.393Z", "publishedAt": "2021-12-08T00:00:00.000Z", "modifiedAt": "2026-08-04T03:55:34.087Z", "state": "published", "provider": "hackerone", "title": "", "descriptions": [ { "lang": "en", "value": "A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "Ivanti EPM", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "4.6.0-512", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-94", "lang": "en", "description": "Code Injection (CWE-94)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://forums.ivanti.com/s/article/SA-2021-12-02", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "http://packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44529", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/44xxx/CVE-2021-44529.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"Ivanti EPM\",\"versions\":[{\"version\":\"4.6.0-512\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/44xxx/CVE-2021-44529.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/44xxx/CVE-2021-44529.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"CWE\",\"lang\":\"en\",\"description\":\"Code Injection (CWE-94)\",\"cweId\":\"CWE-94\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/44xxx/CVE-2021-44529.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":9.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2021-44529:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529", "sourcePath": "retained:/originalText", "text": "Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2021-44529:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529", "modifiedAt": "2024-03-25T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-04T03:55:34.087Z", "fetchedAt": "2026-10-24T05:18:51.393Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-03-25T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Ivanti EPMにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:18:51.393Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "7bcaf856beb21f466ab596db8ef4d5e3d956eb3d08e6aabb4a7b5a601ab46633", "sourceModifiedAt": "2026-08-04T03:55:34.087Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Ivanti EPM Cloud Services Appliance (CSA) にコードインジェクション脆弱性があり、認証されていないユーザーが「nobody」権限の制限された権限で任意のコードを実行できる。", "risk": "攻撃者は制限された権限で悪意のあるコードを実行できるため、システム上で不正な処理が行われる可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "対象は Ivanti EPM Cloud Services Appliance (CSA) である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/44xxx/CVE-2021-44529.json" ], "evidenceIds": [ "E1" ] }, { "text": "バージョン 4.6.0-512 が影響を受けると記載されているが、製品名に CSA が明示されていない。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/44xxx/CVE-2021-44529.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Ivanti EPM。影響ありとして記載：4.6.0-512。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/44xxx/CVE-2021-44529.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/44xxx/CVE-2021-44529.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Ivanti EPM」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2021-44529", "https://forums.ivanti.com/s/article/SA-2021-12-02", "http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html", "http://packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529", "https://forums.ivanti.com/s/article/SA-2021-12-02?language=en_US", "https://nvd.nist.gov/vuln/detail/CVE-2021-44529" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529" ], "evidenceIds": [ "E4", "E5" ] }, { "text": "「CVE-2021-44529」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2021-44529", "https://forums.ivanti.com/s/article/SA-2021-12-02", "http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html", "http://packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529", "https://forums.ivanti.com/s/article/SA-2021-12-02?language=en_US", "https://nvd.nist.gov/vuln/detail/CVE-2021-44529" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2021-44529", "https://forums.ivanti.com/s/article/SA-2021-12-02", "http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html", "http://packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529", "https://forums.ivanti.com/s/article/SA-2021-12-02?language=en_US", "https://nvd.nist.gov/vuln/detail/CVE-2021-44529" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529" ], "evidenceIds": [ "E4", "E5" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/44xxx/CVE-2021-44529.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2021-44529", "https://forums.ivanti.com/s/article/SA-2021-12-02", "http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html", "http://packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529", "https://forums.ivanti.com/s/article/SA-2021-12-02?language=en_US", "https://nvd.nist.gov/vuln/detail/CVE-2021-44529" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/44xxx/CVE-2021-44529.json", "label": "CVE：hackerone" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-44529", "label": "CVE公式レコード" }, { "url": "https://forums.ivanti.com/s/article/SA-2021-12-02", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.html", "label": "CVE掲載の参考情報" }, { "url": "https://forums.ivanti.com/s/article/SA-2021-12-02?language=en_US", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44529", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/44xxx/CVE-2021-44529.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529", "sourceField": "retained:/originalText", "excerpt": "Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/44xxx/CVE-2021-44529.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"Ivanti EPM\",\"versions\":[{\"version\":\"4.6.0-512\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44529", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2021-44529\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2021-44529（Ivanti EPM）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は Ivanti EPM Cloud Services Appliance (CSA) である。\n・バージョン 4.6.0-512 が影響を受けると記載されているが、製品名に CSA が明示されていない。\n・公式の対象表：Ivanti EPM。影響ありとして記載：4.6.0-512。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2021-44529", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:18:51.393Z", "lastSuccess": "2026-10-24T05:18:51.393Z", "sourceCheckedAt": "2026-10-24T05:18:51.393Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } } ], "total": 2280, "limit": 20, "offset": 1160, "filters": { "product": "all", "type": "all", "q": "", "page": 59 }, "pagination": { "page": 59, "pageSize": 20, "totalPages": 114 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-25T02:17:50.013Z", "lastAttempt": "2026-10-25T02:17:50.013Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "ok", "lastSuccess": "2026-10-25T02:17:50.013Z", "lastAttempt": "2026-10-25T02:17:50.013Z", "error": null, "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-25T02:17:50.013Z", "lastAttempt": "2026-10-25T02:17:50.013Z", "error": null, "recordCount": 1756, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "partial", "lastSuccess": "2026-10-24T16:17:49.075Z", "lastAttempt": "2026-10-25T02:17:50.013Z", "error": "未確認のページ・期間は次回の定期取得で続きから反映します。", "recordCount": 0, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-24T16:02:49.075Z 〜 2026-10-24T22:17:49.743Z、全製品の変更 2500/3193件まで確認、対象0件反映。", "cursor": { "start": "2026-10-24T16:02:49.075Z", "end": "2026-10-24T22:17:49.743Z", "kind": "modified", "index": 2500 }, "freshness": "stale", "stale": true }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-25T02:17:50.013Z", "lastAttempt": "2026-10-25T02:17:50.013Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。", "cursor": null, "freshness": "fresh", "stale": false } ] }