Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-38124. PoCs published by tadash10.
AI-analyzed exploit summary The repository contains Python scripts designed to monitor Windows event logs for suspicious activities related to CVE-2024-38124 and CVE-2024-43468, focusing on logon events and SCCM actions. It does not include exploit code but provides detection mechanisms.
Description
Windows Netlogon Elevation of Privilege Vulnerability
Exploits (1)
nomisec
SCANNER
by tadash10 · poc
https://github.com/tadash10/Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468
The repository contains Python scripts designed to monitor Windows event logs for suspicious activities related to CVE-2024-38124 and CVE-2024-43468, focusing on logon events and SCCM actions. It does not include exploit code but provides detection mechanisms.
Classification
Scanner 90%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target:
Windows Event Logs (Security Logs)
Auth required
Prerequisites:
Access to Windows event logs · Administrative privileges to read Security logs
devstral-2 · analyzed Feb 18, 2026
Full analysis →
References (1)
Core 1
Core References
Patch, Vendor Advisory vendor-advisory
patch
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38124
Scores
CVSS v3
9.0
EPSS
0.0115
EPSS Percentile
62.8%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-287
Status
published
Products (23)
Microsoft/Windows Server 2008 Service Pack 2
6.0.6003.0 - 6.0.6003.22918
Microsoft/Windows Server 2008 R2 Service Pack 1
6.1.7601.0 - 6.1.7601.27366
Microsoft/Windows Server 2008 R2 Service Pack 1 (Server Core installation)
6.1.7601.0 - 6.1.7601.27366
Microsoft/Windows Server 2008 Service Pack 2
6.0.6003.0 - 6.0.6003.22918
Microsoft/Windows Server 2008 Service Pack 2 (Server Core installation)
6.0.6003.0 - 6.0.6003.22918
Microsoft/Windows Server 2012
6.2.9200.0 - 6.2.9200.25118
Microsoft/Windows Server 2012 (Server Core installation)
6.2.9200.0 - 6.2.9200.25118
Microsoft/Windows Server 2012 R2
6.3.9600.0 - 6.3.9600.22221
Microsoft/Windows Server 2012 R2 (Server Core installation)
6.3.9600.0 - 6.3.9600.22221
Microsoft/Windows Server 2016
10.0.14393.0 - 10.0.14393.7428
... and 13 more
Published
Oct 08, 2024
Tracked Since
Feb 18, 2026