15
- شناسه CVE-2024-30073 :CVE
- CWE-41 :CWE
- yes :Advisory
- منتشر شده: 09/10/2024
- به روز شده: 12/31/2024
- امتیاز: 7.8
- نوع حمله: T1006
- اثر گذاری: Security Feature Bypass
- برند: Microsoft
- محصول: Windows
- وضعیتPublished :CVE
- No :POC
- وضعیت آسیب پذیری: patch شده
چکیده
این آسیب پذیری بر روی عملکرد ناشناخته‌ای از “نگاشت مناطق امنیتی” (Security Zone Mapping) تأثیر می‌گذارد. ایجاد تغییرات در ورودی، در این بخش منجر به ” تعیین مسیر نهایی ” (Resolution of Path) می‌شود.
توضیحات
این آسیب‌پذیری در دسته CWE-41 قرار می گیرد. این محصول نسبت به افشای محتوای سیستم فایل از طریق برابری مسیر (Path Equivalence) آسیب‌پذیر است. منظور از برابری مسیر شامل استفاده از کاراکترهای خاص در نام فایل‌ها و دایرکتوری‌ها است که برای ایجاد نام‌های متعدد برای یک شیء واحد ایجاد شده‌اند.
این آسیب‌پذیری می‌تواند بر محرمانگی (Confidentiality)، یکپارچگی (Integrity) و دسترس‌پذیری (Availability) تأثیر بگذارد.
تکنیک حمله مرتبط با این آسیب پذیری بر اساس دسته‌بندی MITRE ATT&CK به‌عنوان T1006 شناخته شده است.
CVSS
| Score | Severity | Version | Vector String | |
| 7.8 | HIGH | 3.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/ S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
|
لیست محصولات آسیب پذیر
| Versions | Platforms | Product |
| affected from 10.0.26100.0 before 10.0.26100.1742 | ARM64-based Systems, x64-based Systems
|
Windows 11 Version 24H2
|
| affected from 10.0.17763.0 before 10.0.17763.6293 | 32-bit Systems, x64-based Systems
|
Windows 10 Version 1809
|
| affected from 10.0.17763.0 before 10.0.17763.6293 | x64-based Systems
|
Windows Server 2019
|
| affected from 10.0.17763.0 before 10.0.17763.6293 | x64-based Systems
|
Windows Server 2019 (Server Core installation)
|
| affected from 10.0.20348.0 before 10.0.20348.2700 | x64-based Systems
|
Windows Server 2022
|
| affected from 10.0.0 before 10.0.22000.3197 | x64-based Systems, ARM64-based Systems
|
Windows 11 version 21H2
|
| affected from 10.0.19043.0 before 10.0.19044.4894 | 32-bit Systems, ARM64-based Systems, x64-based Systems
|
Windows 10 Version 21H2
|
| affected from 10.0.22621.0 before 10.0.22621.4169 | ARM64-based Systems, x64-based Systems
|
Windows 11 version 22H2
|
| affected from 10.0.19045.0 before 10.0.19045.4894 | x64-based Systems, ARM64-based Systems, 32-bit Systems
|
Windows 10 Version 22H2
|
| affected from 10.0.22631.0 before 10.0.22631.4169 | ARM64-based Systems
|
Windows 11 version 22H3
|
| affected from 10.0.22631.0 before 10.0.22631.4169 | x64-based Systems
|
Windows 11 Version 23H2
|
| affected from 10.0.25398.0 before 10.0.25398.1128 | x64-based Systems
|
Windows Server 2022, 23H2 Edition (Server Core installation)
|
| affected from 10.0.10240.0 before 10.0.10240.20766 | 32-bit Systems, x64-based Systems
|
Windows 10 Version 1507
|
| affected from 10.0.14393.0 before 10.0.14393.7336 | 32-bit Systems, x64-based Systems
|
Windows 10 Version 1607
|
| affected from 10.0.14393.0 before 10.0.14393.7336 | x64-based Systems
|
Windows Server 2016
|
| affected from 10.0.14393.0 before 10.0.14393.7336 | x64-based Systems
|
Windows Server 2016 (Server Core installation)
|
| affected from 6.0.6003.0 before 6.0.6003.22870 | 32-bit Systems
|
Windows Server 2008 Service Pack 2
|
| affected from 6.0.6003.0 before 6.0.6003.22870 | 32-bit Systems, x64-based Systems
|
Windows Server 2008 Service Pack 2 (Server Core installation)
|
| affected from 6.0.6003.0 before 6.0.6003.22870 | x64-based Systems
|
Windows Server 2008 Service Pack 2
|
| affected from 6.1.7601.0 before 6.1.7601.27320 | x64-based Systems
|
Windows Server 2008 R2 Service Pack 1
|
| affected from 6.1.7601.0 before 6.1.7601.27320 | x64-based Systems
|
Windows Server 2008 R2 Service Pack 1 (Server Core installation)
|
| affected from 6.2.9200.0 before 6.2.9200.25073 | x64-based Systems
|
Windows Server 2012
|
| affected from 6.2.9200.0 before 6.2.9200.25073 | x64-based Systems
|
Windows Server 2012 (Server Core installation)
|
| affected from 6.3.9600.0 before 6.3.9600.22175 | x64-based Systems
|
Windows Server 2012 R2
|
| affected from 6.3.9600.0 before 6.3.9600.22175 | x64-based Systems
|
Windows Server 2012 R2 (Server Core installation)
|
لیست محصولات بروز شده
| Product | Impact | Max Severity | Build Number |
| Windows Server 2012 R2 (Server Core installation) | Security Feature Bypass | Important | 6.3.9600.22175 |
| Windows Server 2012 R2 | Security Feature Bypass | Important | 6.3.9600.22175 |
| Windows Server 2012 R2 | Security Feature Bypass | Important | 1.001 |
| Windows Server 2012 (Server Core installation) | Security Feature Bypass | Important | 6.2.9200.25073 |
| Windows Server 2012 | Security Feature Bypass | Important | 6.2.9200.25073 |
| Windows Server 2012 | Security Feature Bypass | Important | 1.001 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Security Feature Bypass | Important | 6.1.7601.27320 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Security Feature Bypass | Important | 6.1.7601.27320 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Security Feature Bypass | Important | 1.001 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | Security Feature Bypass | Important | 6.1.7601.27320 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | Security Feature Bypass | Important | 6.1.7601.27320 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | Security Feature Bypass | Important | 1.001 |
| Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) | Security Feature Bypass | Important | 6.0.6003.22870 |
| Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) | Security Feature Bypass | Important | 6.0.6003.22870 |
| Windows Server 2008 for x64-based Systems Service Pack 2 | Security Feature Bypass | Important | 6.0.6003.22870 |
| Windows Server 2008 for x64-based Systems Service Pack 2 | Security Feature Bypass | Important | 6.0.6003.22870 |
| Windows Server 2008 for x64-based Systems Service Pack 2 | Security Feature Bypass | Important | 1.001 |
| Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) | Security Feature Bypass | Important | 6.0.6003.22870 |
| Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) | Security Feature Bypass | Important | 6.0.6003.22870 |
| Windows Server 2008 for 32-bit Systems Service Pack 2 | Security Feature Bypass | Important | 6.0.6003.22870 |
| Windows Server 2008 for 32-bit Systems Service Pack 2 | Security Feature Bypass | Important | 6.0.6003.22870 |
| Windows Server 2008 for 32-bit Systems Service Pack 2 | Security Feature Bypass | Important | 1.001 |
| Windows Server 2016 (Server Core installation) | Security Feature Bypass | Important | 10.0.14393.7336 |
| Windows Server 2016 | Security Feature Bypass | Important | 10.0.14393.7336 |
| Windows 10 Version 1607 for x64-based Systems | Security Feature Bypass | Important | 10.0.14393.7336 |
| Windows 10 Version 1607 for 32-bit Systems | Security Feature Bypass | Important | 10.0.14393.7336 |
| Windows 10 for x64-based Systems | Security Feature Bypass | Important | 10.0.10240.20766 |
| Windows 10 for 32-bit Systems | Security Feature Bypass | Important | 10.0.10240.20766 |
| Windows Server 2022, 23H2 Edition (Server Core installation) | Security Feature Bypass | Important | 10.0.25398.1128 |
| Windows 11 Version 23H2 for x64-based Systems | Security Feature Bypass | Important | 10.0.22631.4169 |
| Windows 11 Version 23H2 for ARM64-based Systems | Security Feature Bypass | Important | 10.0.22631.4169 |
| Windows 10 Version 22H2 for 32-bit Systems | Security Feature Bypass | Important | 10.0.19045.4894 |
| Windows 10 Version 22H2 for ARM64-based Systems | Security Feature Bypass | Important | 10.0.19045.4894 |
| Windows 10 Version 22H2 for x64-based Systems | Security Feature Bypass | Important | 10.0.19045.4894 |
| Windows 11 Version 22H2 for x64-based Systems | Security Feature Bypass | Important | 10.0.22621.4169 |
| Windows 11 Version 22H2 for ARM64-based Systems | Security Feature Bypass | Important | 10.0.22621.4169 |
| Windows 10 Version 21H2 for x64-based Systems | Security Feature Bypass | Important | 10.0.19044.4894 |
| Windows 10 Version 21H2 for ARM64-based Systems | Security Feature Bypass | Important | 10.0.19044.4894 |
| Windows 10 Version 21H2 for 32-bit Systems | Security Feature Bypass | Important | 10.0.19044.4894 |
| Windows 11 version 21H2 for ARM64-based Systems | Security Feature Bypass | Important | 10.0.22000.3197 |
| Windows 11 version 21H2 for x64-based Systems | Security Feature Bypass | Important | 10.0.22000.3197 |
| Windows Server 2022 (Server Core installation) | Security Feature Bypass | Important | 10.0.20348.2700 |
| Windows Server 2022 (Server Core installation) | Security Feature Bypass | Important | 10.0.20348.2695 |
| Windows Server 2022 | Security Feature Bypass | Important | 10.0.20348.2700 |
| Windows Server 2022 | Security Feature Bypass | Important | 10.0.20348.2695 |
| Windows Server 2019 (Server Core installation) | Security Feature Bypass | Important | 10.0.17763.6293 |
| Windows Server 2019 | Security Feature Bypass | Important | 10.0.17763.6293 |
| Windows 10 Version 1809 for x64-based Systems | Security Feature Bypass | Important | 10.0.17763.6293 |
| Windows 10 Version 1809 for 32-bit Systems | Security Feature Bypass | Important | 10.0.17763.6293 |
| Windows 11 Version 24H2 for x64-based Systems | Security Feature Bypass | Important | 10.0.26100.1742 |
| Windows 11 Version 24H2 for ARM64-based Systems | Security Feature Bypass | Important | 10.0.26100.1742 |
نتیجه گیری
اکسپلویت این آسیب‌پذیری ظاهراً آسان است، اما انجام حمله نیاز به دسترسی Local دارد. لذا برای جلوگیری از هر گونه نفوذ بهتر است از بروزرسانی های بیان شده استفاده کنید.
منابع
- https://www.cve.org/CVERecord?id=CVE-2024-30073
- https://www.cvedetails.com/cve/CVE-2024-30073/
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30073
- https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-30073
- https://vuldb.com/?id.277015
- https://nvd.nist.gov/vuln/detail/cve-2024-30073
- https://cwe.mitre.org/data/definitions/41.html
