Insecure Default Variable Initialization

CVE-2024-49120

High

8.1/10

Summary

Windows Remote Desktop Services Remote Code Execution Vulnerability

Attack Complexity: HIGH
Attack Vector: NETWORK
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: HIGH
Availability Impact: HIGH

CWE-453 - Insecure Default Variable Initialization

The software, by default, initializes an internal variable with an insecure or less secure value than is possible.

References

Advisory Timeline

Published Dec 12, 2024