Description
Windows Deployment Services Information Disclosure Vulnerability
Reserved 2024-03-22 | Published 2024-05-14 | Updated 2025-05-03 | Assigner
microsoftMEDIUM: 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Problem types
CWE-41: Improper Resolution of Path Equivalence
Product status
10.0.17763.0 before 10.0.17763.5820
affected
10.0.17763.0 before 10.0.17763.5820
affected
10.0.20348.0 before 10.0.20348.2461
affected
10.0.14393.0 before 10.0.14393.6981
affected
10.0.14393.0 before 10.0.14393.6981
affected
6.0.6003.0 before 6.0.6003.22668
affected
6.0.6003.0 before 6.0.6003.22668
affected
6.0.6003.0 before 6.0.6003.22668
affected
6.1.7601.0 before 6.1.7601.27117
affected
6.1.7601.0 before 6.1.7601.27117
affected
6.2.9200.0 before 6.2.9200.24868
affected
6.2.9200.0 before 6.2.9200.24868
affected
6.3.9600.0 before 6.3.9600.21972
affected
6.3.9600.0 before 6.3.9600.21972
affected
References
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30036 (Windows Deployment Services Information Disclosure Vulnerability) vendor-advisory
cve.org (CVE-2024-30036)
nvd.nist.gov (CVE-2024-30036)
Download JSON