KLA65506 Multiple vulnerabilities in Microsoft System Center

Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft Defender for IoT can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Microsoft Defender for IoT can be exploited remotely to execute arbitrary code.

Original advisories

CVE-2024-21324

CVE-2024-29055

CVE-2024-21323

CVE-2024-29054

CVE-2024-29053

CVE-2024-21322

Related products

Microsoft-Defender-for-IoT

CVE list

CVE-2024-21324 high

CVE-2024-29055 high

CVE-2024-21323 high

CVE-2024-29054 high

CVE-2024-29053 high

CVE-2024-21322 high

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• Microsoft Defender for IoT