What is the CVSS score of CVE-2024-6689?

CVE-2024-6689 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Microsoft CVE-2024-6689

HIGH

Exposed Dangerous Method or Function (CWE-749)

2024-07-15 a341c0d1-ebf7-493f-a84e-38cf86618674

Privilege Escalation Microsoft

7.8

CVSS 3.1 · Vendor: a341c0d1-ebf7-493f-a84e-38cf86618674

Severity by source

Vendor (a341c0d1-ebf7-493f-a84e-38cf86618674) PRIMARY

7.8 HIGH

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from Vendor (a341c0d1-ebf7-493f-a84e-38cf86618674) · only source for this CVE.

CVSS VectorVendor: a341c0d1-ebf7-493f-a84e-38cf86618674

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Jul 15, 2024 - 14:15 cve.org

HIGH 7.8

DescriptionCVE.org

Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivileged user to escalate privileges to SYSTEM.

AnalysisAI

Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivileged user to escalate privileges to SYSTEM. Rated high severity (CVSS 7.8). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-749. Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivileged user to escalate privileges to SYSTEM.

Affected ProductsAI

MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.