CISA orders urgent patch for actively exploited SCCM flaw
TL;DR Summary
CISA directed federal agencies to patch CVE-2024-43468, a SQL injection flaw in Microsoft Configuration Manager (SCCM) that is now being actively exploited in attacks. The vulnerability was patched by Microsoft in October 2024, but exploitation was later shown in PoC code, and CISA warns that unpatched systems pose significant risk. Agencies must apply mitigations by March 5 under BOD 22-01, and CISA recommends that organizations outside federal use vendor guidance to secure affected systems as soon as possible.
- CISA flags critical Microsoft SCCM flaw as exploited in attacks BleepingComputer
- Attackers finally get around to exploiting critical Microsoft bug from 2024 theregister.com
- CISA adds SolarWinds, Microsoft, Apple, Notepad++ vulnerabilities to KEV catalog SC Media
- CISA Warns of Actively Exploited SQL Injection Flaw in Microsoft Configuration Manager Cyber Press
- CISA Adds Six Microsoft 0-Day Vulnerabilities to KEV Catalog Following Active Exploitation CybersecurityNews
Reading Insights
Total Reads
0
Unique Readers
9
Time Saved
3 min
vs 4 min read
Condensed
88%
644 → 78 words
Want the full story? Read the original article
Read on BleepingComputer