CVE-2023-24908: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.1607Fixed in 10.0.20348.1602Patch KB5023786 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.4131Patch KB5023702 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.20865Patch KB5023764 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.24168Patch KB5023752 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.26415Patch KB5023759 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.21966Patch KB5023754 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.5786Patch KB5023697 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.19805Patch KB5023713 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.2728Patch KB5023696 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.2728Patch KB5023696 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22000.1696Patch KB5023698 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19042.2728Patch KB5023696 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.1413Patch KB5023706
Event History
Frequently Asked Questions
What is the severity of CVE-2023-24908?
CVE-2023-24908 has a severity rating of critical due to its potential for remote code execution.
How do I fix CVE-2023-24908?
To fix CVE-2023-24908, apply the latest security patches provided by Microsoft for the affected software.
Which systems are affected by CVE-2023-24908?
CVE-2023-24908 affects multiple versions of Microsoft Windows Server including 2008, 2012, 2016, 2019, and 2022.
What type of vulnerability is CVE-2023-24908?
CVE-2023-24908 is classified as a Remote Code Execution vulnerability.
How can CVE-2023-24908 be exploited?
CVE-2023-24908 can be exploited by an attacker sending specially crafted requests to the affected systems that can lead to arbitrary code execution.