CVE-2024-43451 Analizi
Windows NTLM Hash ifsa acigi. Kotu amacli bir URL veya UNC yolu ile tetikleniyor. Hancitor spam kampanyalarinda kullanicilarin NTLM hash bilgileri alinmak icin kullanilmistir.
CVE-2024-43451
NTLM Hash Exploit vulnerability. When the malicious URL is opened, it causes user NTLM credentials to be shared with the remote attacker. It has been seen in Hancitor and phishing campaigns.
Vulnerability Profile
CVSS Score
6.5 / 10.0
Severity
Medium
Exploitation Status
⚠ Active Exploitation
Patch Status
✓ Patch Available
Affected Software
Windows 7/10/11, Windows Server 2008-2022
Exploitation Method
Information Disclosure
MITRE ATT&CK
T1557.001 - LLMNR/NBT-NS Poisoning