CVE-2024-43467: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.22175Patch KB5043138 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.25073Patch KB5043125 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.22870Patch KB5043087 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.27320Patch KB5043092 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.6293Patch KB5043050 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.2700Fixed in 10.0.20348.2695Patch KB5042880 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.7336Patch KB5043051 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.1128Patch KB5043055
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43467?
CVE-2024-43467 has been classified as a remote code execution vulnerability with critical severity.
How do I fix CVE-2024-43467?
To fix CVE-2024-43467, install the latest security patches provided by Microsoft for your affected Windows Server version.
Which versions of Windows are affected by CVE-2024-43467?
CVE-2024-43467 affects various versions of Windows Server, including 2012, 2012 R2, 2016, 2018, 2022, and their respective server core installations.
What happens if CVE-2024-43467 is exploited?
If successfully exploited, CVE-2024-43467 allows an attacker to execute arbitrary code on the affected Windows system.
Is there a workaround for CVE-2024-43467?
Currently, there is no official workaround for CVE-2024-43467, and it is strongly recommended to apply the security updates promptly.