Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
History

Mon, 23 Sep 2024 17:30:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft sql 2016 Azure Connect Feature Pack
Microsoft sql Server 2016
Microsoft sql Server 2017
Microsoft sql Server 2019
Microsoft sql Server 2022
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:microsoft:sql_2016_azure_connect_feature_pack:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server_2016:*:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:sql_server_2017:*:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*
Vendors & Products Microsoft sql 2016 Azure Connect Feature Pack
Microsoft sql Server 2016
Microsoft sql Server 2017
Microsoft sql Server 2019
Microsoft sql Server 2022

Tue, 10 Sep 2024 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 10 Sep 2024 17:15:00 +0000

Type Values Removed Values Added
Description Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
Title Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability
First Time appeared Microsoft
Microsoft sql Server
Weaknesses CWE-822
CPEs cpe:2.3:a:microsoft:sql_server:2017:-:*:*:*:*:x64:*
cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:sql_server:2022:*:*:*:*:*:x64:*
Vendors & Products Microsoft
Microsoft sql Server
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}


cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2024-09-10T16:53:37.939Z

Updated: 2024-10-09T01:26:03.415Z

Reserved: 2024-06-05T20:19:26.777Z

Link: CVE-2024-37340

cve-icon Vulnrichment

Updated: 2024-09-10T19:12:47.473Z

cve-icon NVD

Status : Analyzed

Published: 2024-09-10T17:15:18.417

Modified: 2024-09-23T17:08:56.943

Link: CVE-2024-37340

cve-icon Redhat

No data.