External Control of File Name or Path

CVE-2024-43581

High

7.1/10

Summary

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

Attack Complexity: HIGH
Attack Vector: NETWORK
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: REQUIRED
Privileges Required: LOW
Confidentiality Impact: HIGH
Availability Impact: HIGH

CWE-73 - External Control of File Name or Path

The software allows user input to control or influence paths or file names that are used in filesystem operations.

References

Advisory Timeline

Published Oct 08, 2024