CVE-2023-36911
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk75th percentile - higher than 75% of all known CVEs
Summary
A vulnerability in Microsoft Message Queuing (MSMQ) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
Risk Assessment
Organizations may be exposed to remote attacks that could lead to data loss or full system control. Exploitation of this vulnerability could result in serious security implications.
Recommendation
It is recommended to update MSMQ software to the latest version to patch this vulnerability. Additionally, systems should be monitored for suspicious activity.
Other vulnerabilities in Microsoft Message Queuing (MSMQ)
See all- CVE-2024-30080Critical
A remote code execution vulnerability in Microsoft Message Queuing (MSMQ) allows an attacker to execute arbitrary code remotely in the system context. The flaw exists in the message queuing mechanism and can be exploited without authentication.
- CVE-2023-36910Critical
A vulnerability in Microsoft Message Queuing (MSMQ) allows for remote code execution. An attacker can exploit this flaw to take control of the system.
- CVE-2023-35385Critical
A vulnerability in Microsoft Message Queuing (MSMQ) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
- CVE-2024-21405High
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability.
- CVE-2024-21363High
Remote Code Execution vulnerability in Microsoft Message Queuing (MSMQ). Allows a remote attacker to execute arbitrary code.
- CVE-2024-21355High
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability.
- CVE-2024-21354High
Elevation of privilege vulnerability in Microsoft Message Queuing (MSMQ). An attacker could exploit it to gain elevated privileges.
- CVE-2023-38254Medium
A vulnerability in Microsoft Message Queuing (MSMQ) allows attackers to remotely trigger a fault, leading to denial of service. Exploiting this flaw may cause the MSMQ service to stop responding to requests.
- CVE-2023-38172High
A vulnerability in Microsoft Message Queuing (MSMQ) allows attackers to remotely trigger an error, leading to denial of service. Exploiting this flaw may result in MSMQ service unavailability.
- CVE-2023-36912High
A vulnerability in Microsoft Message Queuing (MSMQ) allows attackers to remotely trigger an error, leading to denial of service.
Original NVD description (English source)
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability