FILE Microsoft Management Console Remote Code Execution Vulnerability (CVE-2024-43572) state 1-F/Flow

Rule ID

1235735

Severity

Medium

Description

A MotW bypass has been identified. This vulnerability can be exploited to achieve code execution.

Impact

Others

Recommendation

Update vendor's patch.

IPS Category

File vulnerabilities

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

Windows Server 2008, Windows Server 2012, Windows Server 2016, Windows Server 2019