Nov 2024: NTLM Hash Disclosure Spoofing Vulnerability
CVE-2024-43451 Published on November 12, 2024
NTLM Hash Disclosure Spoofing Vulnerability
NTLM Hash Disclosure Spoofing Vulnerability
Under Active Exploitation
This vulnerability is under active exploitation.Known Exploited Vulnerability
This Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user.
The following remediation steps are recommended / required by December 3, 2024: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vulnerability Analysis
Weakness Type
External Control of File Name or Path
The software allows user input to control or influence paths or file names that are used in filesystem operations.
Products Associated with CVE-2024-43451
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
