Microsoft

Microsoft's Windows Key Distribution Center (KDC) Proxy service experienced a significant remote code execution vulnerability, tracked as CVE-2024-43639, which could have allowed unauthenticated attackers to execute arbitrary code on affected servers. The flaw, due to an integer overflow from missing length checks on Kerberos response handling, was patched in November 2024. Had it been exploited, attackers could have gained full control over compromised systems, underlining the critical importance of quick patch deployment in enterprise security.

Source: https://cybersecuritynews.com/windows-kdc-proxy-rce-vulnerability/

TPRM report: https://scoringcyber.rankiteo.com/company/microsoft

"id": "mic412030525",
"linkid": "microsoft",
"type": "Vulnerability",
"date": "3/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Technology',
                        'name': 'Microsoft',
                        'type': 'Corporation'}],
 'attack_vector': 'Unauthenticated remote attacker',
 'date_publicly_disclosed': '2024-11-01',
 'date_resolved': '2024-11-01',
 'description': "Microsoft's Windows Key Distribution Center (KDC) Proxy "
                'service experienced a significant remote code execution '
                'vulnerability, tracked as CVE-2024-43639, which could have '
                'allowed unauthenticated attackers to execute arbitrary code '
                'on affected servers. The flaw, due to an integer overflow '
                'from missing length checks on Kerberos response handling, was '
                'patched in November 2024. Had it been exploited, attackers '
                'could have gained full control over compromised systems, '
                'underlining the critical importance of quick patch deployment '
                'in enterprise security.',
 'impact': {'systems_affected': ['Windows KDC Proxy service']},
 'lessons_learned': 'The critical importance of quick patch deployment in '
                    'enterprise security.',
 'post_incident_analysis': {'root_causes': 'Integer overflow from missing '
                                           'length checks on Kerberos response '
                                           'handling'},
 'response': {'remediation_measures': 'Patch deployed'},
 'title': 'Windows KDC Proxy Service Remote Code Execution Vulnerability',
 'type': 'Remote Code Execution',
 'vulnerability_exploited': 'CVE-2024-43639'}