First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-43615

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Oct 8, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-436167.8Microsoft Office Remote Code Execution Vulnerability CVE-2024-43625.4The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'siteorigin_widget' shortco CVE-2024-436208.8Windows Telephony Service Remote Code Execution Vulnerability CVE-2024-436218.8Windows Telephony Service Remote Code Execution Vulnerability CVE-2024-436228.8Windows Telephony Service Remote Code Execution Vulnerability CVE-2024-436237.8Windows NT OS Kernel Elevation of Privilege Vulnerability CVE-2024-436248.8Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability CVE-2024-436258.1Microsoft Windows VMSwitch Elevation of Privilege Vulnerability CVE-2024-436267.8Windows Telephony Service Elevation of Privilege Vulnerability CVE-2024-436278.8Windows Telephony Service Remote Code Execution Vulnerability CVE-2024-436288.8Windows Telephony Service Remote Code Execution Vulnerability CVE-2024-436297.8Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-43615: High severity, CVSS 7.1 | Vulnix