This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Microsoft Windows patches a critical RCE vulnerability

Microsoft warns of a critical TCP/IP remote code execution vulnerability affecting all supported versions of Windows and Windows Server. Microsoft has released urgent security patches and recommends updating immediately [1][2]: Windows 10 1507: KB5041782 Windows 10 1607: KB5041773 Windows 10 1809: KB5041578 Windows 10 21h2: KB5041580 Windows 10 22h2: KB5041580 Windows 11 21h2: KB5041592 Windows 11 22h2: KB5041585 Windows 11 23h2: KB5041585 Windows 11 24h2: KB5041571 Windows Server 2016 1607: KB5041773 Windows Server 2019 1809: KB5041578 Windows Server 2022 21h2: KB5041160 Windows Server 2022 22h2: KB5041160 Windows Server 2022 23h2: KB5041573 Furthermore, disabling IPv6 is recommended as a temporary workaround, although the company warns of possible problems with the functioning of Windows [3].

Microsoft Windows - remote code execution (CVE-2024-38063)
CVSS 9.8 (Critical)

Allows an unauthenticated remote attacker to execute code remotely on all Windows systems by repeatedly sending specially crafted IPv6 packets [1]. This vulnerability is able to spread without user interaction [3].

The vulnerability is present in products:

  • Windows;
  • Windows Server;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 13. 8. 2024.

By CESNET, z.s.p.o. Michaela Jarošová on 16. 8. 2024.

CESNET, z.s.p.o. Logo