ZDI-CAN-23298: ZDI-24-989: Microsoft Azure Container Network Management sbidprod Uncontrolled Search Path Element Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-23298?
The severity of ZDI-CAN-23298 is rated at 9.8 on the CVSS scale, indicating a critical vulnerability.
What does ZDI-CAN-23298 allow attackers to do?
ZDI-CAN-23298 allows remote attackers to execute arbitrary code on affected installations of Microsoft Azure without requiring authentication.
Who is affected by ZDI-CAN-23298?
Organizations using Microsoft Azure are affected by ZDI-CAN-23298, particularly those with unpatched installations.
How do I fix the vulnerability ZDI-CAN-23298?
To fix ZDI-CAN-23298, update your Microsoft Azure installation to the latest version as provided by Microsoft.
What should I do if I suspect exploitation of ZDI-CAN-23298?
If you suspect exploitation of ZDI-CAN-23298, immediately disconnect affected systems and conduct a thorough security assessment.