CVE-2024-38162 HIGH

CVE-2024-38162: Azure Connected Machine Agent Elevation of Privilege Vulnerability

Vendor Microsoft
Product Azure Connected Machine Agent
Weakness CWE-284
Published August 13, 2024
Last update July 10, 2025
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

What the vulnerability does

01Description

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Key dates

02Disclosure timeline

August 13, 2024 CVE published
July 10, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-3674 TOTOLINK A3700R cstecgi.cgi setUrlFilterRules access control CVE-2021-28505 On affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol. CVE-2024-0356 Mandelo ssm_shiro_blog Backend updateRoles access control CVE-2021-24583 Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Deletion CVE-2021-40416