Defender For Iot CVE-2024-21322

HIGH

Command Injection (CWE-77)

2024-04-09 secure@microsoft.com

RCE Command Injection Microsoft Defender For Iot

7.2

CVSS 3.1 · Vendor: microsoft

Share

Severity by source

Vendor (microsoft) PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Apr 09, 2024 - 17:15 cve.org

HIGH 7.2

DescriptionCVE.org

Microsoft Defender for IoT Remote Code Execution Vulnerability

AnalysisAI

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Command Injection (CWE-77), which allows attackers to inject arbitrary commands into system command execution. Microsoft Defender for IoT Remote Code Execution Vulnerability Affected products include: Microsoft Defender For Iot.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized APIs, avoid shell execution, validate input with strict allowlists.

More in Defender For Iot

View all

CVE-2021-42311 CRITICAL Act Now POC

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated critical severity (CVSS 10.0), this vulnerability

CVE-2021-42313 CRITICAL Act Now

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated critical severity (CVSS 10.0), this vulnerability

CVE-2024-38089 CRITICAL Act Now

Microsoft Defender for IoT Elevation of Privilege Vulnerability. Rated critical severity (CVSS 9.9), this vulnerability

CVE-2021-43882 CRITICAL Act Now

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability i

CVE-2021-42310 CRITICAL Act Now

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability i

CVE-2024-29053 HIGH This Week

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is re

CVE-2024-21323 HIGH This Week

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is re

CVE-2021-42315 HIGH This Week

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is re

CVE-2021-42314 HIGH This Week

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is re

CVE-2021-41365 HIGH This Week

Microsoft Defender for IoT Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is re

CVE-2023-23379 HIGH This Week

Microsoft Defender for IoT Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is l

CVE-2022-23266 HIGH This Week

Microsoft Defender for IoT Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is l

Same weakness CWE-77 – Command Injection

View all

CVE-2024-21887 CRITICAL POC

CVE-2012-1823 CRITICAL POC

CVE-2016-1555 CRITICAL POC

CVE-2015-2051 HIGH POC

CVE-2017-6327 HIGH POC

CVE-2023-34960 CRITICAL POC

CVE-2023-37679 CRITICAL POC

CVE-2025-10035 CRITICAL POC

Same technique RCE

View all

CVE-2017-7269 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2016-4117 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2025-53770 CRITICAL POC

CVE-2020-7961 CRITICAL POC

Share

CVE-2024-21322 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy