CVE-2024-38074

The vulnerability results from an integer underflow error (CWE-191) in the Remote Desktop Licensing Service. An attacker can send a specially crafted network request to the vulnerable server without needing any privileges or user interaction. The attack vector is network-based, and attack complexity is rated as low, meaning the exploit can be performed in a repeatable and reliable manner.

Successful exploitation of the vulnerability allows an attacker to execute arbitrary code remotely on the server with service privileges, which may lead to full system takeover, data leakage, and compromise of server integrity and availability.

Apply patches available from the vendor according to references — updates were published by Microsoft as part of Patch Tuesday on July 9, 2024. Detailed information available at: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38074. As a temporary measure, it is recommended to restrict network access to the Remote Desktop Licensing Service only to trusted hosts.

Microsoft Windows Server 2008, Windows Server 2012, Windows Server 2016, Windows Server 2019 — affects systems with active Remote Desktop Licensing Service; detailed version lists indicated in vendor references