CVE-2024-43451

MediumCVSS 6.5/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

NTLM Hash Disclosure Spoofing Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-73

Affected software

No affected versions have been published.

Timeline

Published
Nov 12, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Nov 12, 2024
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-434527.5Windows Registry Elevation of Privilege VulnerabilityCVE-2024-434538.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-434547.1Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-434559.8Windows Remote Desktop Licensing Service Spoofing VulnerabilityCVE-2024-434567.4Windows Remote Desktop Services Tampering VulnerabilityCVE-2024-434577.8Windows Setup and Deployment Elevation of Privilege VulnerabilityCVE-2024-434587.7Windows Networking Information Disclosure VulnerabilityCVE-2024-434598.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-43469.1The Startklar Elementor Addons plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.7.13. TCVE-2024-434608.8Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileCVE-2024-434618.8Windows MSHTML Platform Spoofing VulnerabilityCVE-2024-434628.8SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-43451: Medium severity, CVSS 6.5 | Vulnix