A newly disclosed critical vulnerability, identified as CVE-2024-49124, has been classified as a Remote Code Execution (RCE) flaw with a severity rating of Critical by Microsoft.

This vulnerability explicitly impacts systems utilizing the Lightweight Directory Access Protocol (LDAP). The issue stems from a race condition (CWE-362) that occurs due to improper synchronization during concurrent execution.

Attackers could potentially exploit the flaw for unauthorized access. The vulnerability has been fixed in the Microsoft Patch Tuesday, December 2024 update.

Leveraging 2024 MITRE ATT&CK Results for SME & MSP Cybersecurity Leaders – Attend Free Webinar

LDAP Client Vulnerability Details of CVE-2024-49124

CVE-2024-49124 is a race condition vulnerability in LDAP clients. An attacker could exploit concurrent access to shared resources by sending specially crafted requests to a vulnerable server. Attackers could gain extensive control over the affected system by executing malicious code with SYSTEM-level privileges.

The vulnerability, CVE-2024-49124, impacts Remote Code Execution and has a CVSS severity score of 8.1, classifying it as Critical. It is exploitable over a network with a high attack complexity and requires no privileges or user interaction.

The scope remains unchanged, and its exploitability is currently considered less likely. While an official fix is available, the exploit code maturity is unproven, suggesting limited immediate risk of widespread exploitation.

However, the high complexity of the attack indicates that successful exploitation would require precise timing and expertise to manipulate the race condition effectively.

Currently, no public exploit or proof-of-concept code has been disclosed, and there are no reports of active exploitation in the wild.

The vulnerability greatly impacts confidentiality, as it could allow unauthorized access to sensitive data. Similarly, the integrity impact is High, enabling potential unauthorized system modifications.

An attacker does not require prior authentication or user interaction to exploit this flaw. The vulnerability allows them to craft and send malicious requests over the network, targeting LDAP servers. However, the flaw’s high complexity indicates that specific conditions must align for an exploit to succeed, such as winning the inherent race condition.

Investigate Real-World Malicious Links,Malware & Phishing Attacks With ANY.RUN - Try for Free

The post Critical LDAP Client Vulnerability Let Attackers Gain Vulnerable System Access Remotely appeared first on Cyber Security News.