CVE-2024-38094KEV · OVERDUECWE-502

Microsoft SharePoint Remote Code Execution Vulnerability

High · published July 9, 2024

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.2. It is confirmed in active exploitation. It sits in the 98.9th percentile for exploit probability.

712
days past CISA
deadline
CVSS v3.1
7.2
EPSS
51%
Percentile
98.9
In the wild
Confirmed
What it is

🚨 One compromised SharePoint site is all it takes for an attacker to unleash chaos! This Remote Code Execution vulnerability lets them run wild with your data. 🔥 Think of it like a building with a malfunctioning security system; once an intruder gets in, they can access every office and file without a hitch. Without proper checks, they can commandeer your entire operation, stealing or altering sensitive information like it’s their personal playground. With this vulnerability, an attacker could execute arbitrary code on the SharePoint server, leading to full control over the system. They could exfiltrate sensitive data, manipulate files, or even deploy malware, putting your organization at serious risk. The consequences could be absolutely devastating, both financially and reputationally.

Put simply

Think of it like a building with a malfunctioning security system; once an intruder gets in, they can access every office and file without a hitch. Without proper checks, they can commandeer your entire operation, stealing or altering sensitive information like it’s their personal playground. This vulnerability in Microsoft SharePoint allows remote attackers to execute arbitrary code by sending specially crafted requests to the server, bypassing intended security measures.

What to do

With this vulnerability, an attacker could execute arbitrary code on the SharePoint server, leading to full control over the system. They could exfiltrate sensitive data, manipulate files, or even deploy malware, putting your organization at serious risk. The consequences could be absolutely devastating, both financially and reputationally. To protect against this threat, patch your SharePoint to the latest version immediately. Engage your security team to review access controls and monitor for any unusual activity on your servers. Regularly updating is crucial to staying ahead of such threats. You've got this! Implement these steps and you’ll be on your way to securing your SharePoint environment in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.50892 · 98.9th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2024-07-09T17:03Z
KEV added
2024-10-22 · due 2024-11-12
EPSS history
Timeline
  • 22 OCT 00:00Z
    Added to CISA KEV — remediate by Nov 12
    kev
  • 09 JUL 17:03Z
    Microsoft SharePoint Remote Code Execution Vulnerability
    cvelistv5