CVE-2024-28943— Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Quick assessment

Copy summary Copy citation

Affected

Microsoft Microsoft SQL Server 2019 (GDR)

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft ODBC Driver是美国微软（Microsoft）公司的一种驱动程序。允许应用程序使用 SQL 作为访问数据的标准来访问数据库管理系统 (DBMS) 中的数据。 Microsoft ODBC Driver 存在安全漏洞。以下产品和版本受到影响：Microsoft ODBC Driver 17 for SQL Server on MacOS,Microsoft ODBC Driver 18 for SQL Server on Windows,Microsoft ODBC Driver

CVE-2024-28943 affects Microsoft Microsoft SQL Server 2019 (GDR). No confirmed in-the-wild exploitation; assess based on exposure. Microsoft ODBC Driver是美国微软（Microsoft）公司的一种驱动程序。允许应用程序使用 SQL 作为访问数据的标准来访问数据库管理系统 (DBMS) 中的数据。 Microsoft ODBC Driver 存在安全漏洞。以下产品和版本受到影响：Microsoft ODBC Driver 17 for SQL Server on Mac CVE-2024-28943 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2024-28943

I. Basic Information for CVE-2024-28943

Affected Products

II. Public POCs for CVE-2024-28943

III. Intelligence Information for CVE-2024-28943

Vendor Advisories for CVE-2024-28943 (1)

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28943 vendor-advisory

• https://www.cve.org/CVERecord?id=CVE-2024-28943

Same Patch Batch · Microsoft · 2024-04-09 · 147 CVEs total

Showing top 20 of 147 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2024-28943