CVE-2024-43468 CISA KEV · Actively exploitedSuited to automated attack · CISA
Microsoft Configuration Manager Remote Code Execution Vulnerability
CVSS score
9.8
EPSS probability
%81.0
Risk score
15.9
Published
2 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
CVE-2024-43468 SCCM SQL Injection Exploit (mTLS unextractable client cert from MacOS keychain version)
Makefile Go / Python
tadash10/Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2020-0796 Actively exploitedMemory buffer overflow in Microsoft Windows 10 Version 1903 For 32 Bit Systems
Patch verified Public Exploits:4EPSS %100
9.8
CVE-2025-53770 Actively exploitedMicrosoft SharePoint Server Remote Code Execution Vulnerability
Patch verified Public Exploits:12EPSS %100
9.8
CVE-2025-59287 Actively exploitedWindows Server Update Service (WSUS) Remote Code Execution Vulnerability
Patch verified Public Exploits:10EPSS %100
9.8
CVE-2021-38647 Actively exploitedOpen Management Infrastructure (OMI) Remote Code Execution Vulnerability
Patch verified Public Exploits:10EPSS %100
9.8
CVE-2024-21413 Actively exploitedMicrosoft Outlook Remote Code Execution Vulnerability
Patch verified Public Exploits:7EPSS %95
9.1
CVE-2021-34473 Actively exploitedMicrosoft Exchange Server Remote Code Execution Vulnerability
Patch verified Public Exploits:9EPSS %100
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-43468"