CVE-2024-37968 - Vulnerability Details

Vendors	Products
Microsoft	Windows Server 2008 Windows Server 2012 Windows Server 2016 Windows Server 2019 Windows Server 2022 Windows Server 2022 23h2

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37968

Type	Values Removed	Values Added
CPEs	cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.27277::::::x64: cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.22825::::::x64: cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.22825::::::x86: cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.25031::::::x64: cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.22134::::::x64: cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7259:::::::* cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.6189:::::::* cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.2655:::::::* cpe:2.3:o:microsoft:windows_server_23h2:10.0.25398.1085:::::::*
Vendors & Products	Microsoft windows Server 2008 R2 Microsoft windows Server 2008 Sp2 Microsoft windows Server 2012 R2 Microsoft windows Server 23h2

Type	Values Removed	Values Added
First Time appeared		Microsoft windows Server 2008 Microsoft windows Server 2022 23h2
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::: cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:* cpe:2.3:o:microsoft:windows_server_2012:::::::: cpe:2.3:o:microsoft:windows_server_2012:r2:::::::* cpe:2.3:o:microsoft:windows_server_2016:::::::: cpe:2.3:o:microsoft:windows_server_2019:::::::: cpe:2.3:o:microsoft:windows_server_2022:::::::: cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::
Vendors & Products		Microsoft windows Server 2008 Microsoft windows Server 2022 23h2

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Windows DNS Spoofing Vulnerability
Title		Windows DNS Spoofing Vulnerability
First Time appeared		Microsoft Microsoft windows Server 2008 R2 Microsoft windows Server 2008 Sp2 Microsoft windows Server 2012 Microsoft windows Server 2012 R2 Microsoft windows Server 2016 Microsoft windows Server 2019 Microsoft windows Server 2022 Microsoft windows Server 23h2
Weaknesses		CWE-345
CPEs		cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.27277::::::x64: cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.22825::::::x64: cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.22825::::::x86: cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.25031::::::x64: cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.22134::::::x64: cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.7259:::::::* cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.6189:::::::* cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.2655:::::::* cpe:2.3:o:microsoft:windows_server_23h2:10.0.25398.1085:::::::*
Vendors & Products		Microsoft Microsoft windows Server 2008 R2 Microsoft windows Server 2008 Sp2 Microsoft windows Server 2012 Microsoft windows Server 2012 R2 Microsoft windows Server 2016 Microsoft windows Server 2019 Microsoft windows Server 2022 Microsoft windows Server 23h2
References		https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37968
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-37968", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2024-06-10T21:22:19.229Z", "datePublished": "2024-08-13T17:30:41.604Z", "dateUpdated": "2025-05-21T21:07:27.973Z"}, "containers": {"cna": {"title": "Windows DNS Spoofing Vulnerability", "datePublic": "2024-08-13T07:00:00.000Z", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", "versionStartIncluding": "10.0.17763.0", "versionEndExcluding": "10.0.17763.6189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", "versionStartIncluding": "10.0.17763.0", "versionEndExcluding": "10.0.17763.6189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "versionStartIncluding": "10.0.20348.0", "versionEndExcluding": "10.0.20348.2655"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*", "versionStartIncluding": "10.0.25398.0", "versionEndExcluding": "10.0.25398.1085"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", "versionStartIncluding": "10.0.14393.0", "versionEndExcluding": "10.0.14393.7259"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", "versionStartIncluding": "10.0.14393.0", "versionEndExcluding": "10.0.14393.7259"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*", "versionStartIncluding": "6.0.6003.0", "versionEndExcluding": "6.0.6003.22825"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*", "versionStartIncluding": "6.0.6003.0", "versionEndExcluding": "6.0.6003.22825"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*", "versionStartIncluding": "6.0.6003.0", "versionEndExcluding": "6.0.6003.22825"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*", "versionStartIncluding": "6.1.7601.0", "versionEndExcluding": "6.1.7601.27277"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*", "versionStartIncluding": "6.1.7601.0", "versionEndExcluding": "6.1.7601.27277"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", "versionStartIncluding": "6.2.9200.0", "versionEndExcluding": "6.2.9200.25031"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", "versionStartIncluding": "6.2.9200.0", "versionEndExcluding": "6.2.9200.25031"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", "versionStartIncluding": "6.3.9600.0", "versionEndExcluding": "6.3.9600.22134"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", "versionStartIncluding": "6.3.9600.0", "versionEndExcluding": "6.3.9600.22134"}]}]}], "affected": [{"vendor": "Microsoft", "product": "Windows Server 2019", "platforms": ["x64-based Systems"], "versions": [{"version": "10.0.17763.0", "lessThan": "10.0.17763.6189", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": ["x64-based Systems"], "versions": [{"version": "10.0.17763.0", "lessThan": "10.0.17763.6189", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows Server 2022", "platforms": ["x64-based Systems"], "versions": [{"version": "10.0.20348.0", "lessThan": "10.0.20348.2655", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "platforms": ["x64-based Systems"], "versions": [{"version": "10.0.25398.0", "lessThan": "10.0.25398.1085", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows Server 2016", "platforms": ["x64-based Systems"], "versions": [{"version": "10.0.14393.0", "lessThan": "10.0.14393.7259", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "platforms": ["x64-based Systems"], "versions": [{"version": "10.0.14393.0", "lessThan": "10.0.14393.7259", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "platforms": ["32-bit Systems"], "versions": [{"version": "6.0.6003.0", "lessThan": "6.0.6003.22825", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "platforms": ["32-bit Systems", "x64-based Systems"], "versions": [{"version": "6.0.6003.0", "lessThan": "6.0.6003.22825", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows Server 2008  Service Pack 2", "platforms": ["x64-based Systems"], "versions": [{"version": "6.0.6003.0", "lessThan": "6.0.6003.22825", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1", "platforms": ["x64-based Systems"], "versions": [{"version": "6.1.7601.0", "lessThan": "6.1.7601.27277", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "platforms": ["x64-based Systems"], "versions": [{"version": "6.1.7601.0", "lessThan": "6.1.7601.27277", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows Server 2012", "platforms": ["x64-based Systems"], "versions": [{"version": "6.2.9200.0", "lessThan": "6.2.9200.25031", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "platforms": ["x64-based Systems"], "versions": [{"version": "6.2.9200.0", "lessThan": "6.2.9200.25031", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows Server 2012 R2", "platforms": ["x64-based Systems"], "versions": [{"version": "6.3.9600.0", "lessThan": "6.3.9600.22134", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "platforms": ["x64-based Systems"], "versions": [{"version": "6.3.9600.0", "lessThan": "6.3.9600.22134", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "Windows DNS Spoofing Vulnerability", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-345: Insufficient Verification of Data Authenticity", "lang": "en-US", "type": "CWE", "cweId": "CWE-345"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-05-21T21:07:27.973Z"}, "references": [{"name": "Windows DNS Spoofing Vulnerability", "tags": ["vendor-advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37968"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "HIGH", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-14T13:51:52.318644Z", "id": "CVE-2024-37968", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-14T13:52:08.406Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-37968 (string)

assignerOrgId : f38d906d-7342-40ea-92c1-6c4a2c6478c8 (string)

state : PUBLISHED (string)

assignerShortName : microsoft (string)

dateReserved : 2024-06-10T21:22:19.229Z (string)

datePublished : 2024-08-13T17:30:41.604Z (string)

dateUpdated : 2025-05-21T21:07:27.973Z (string)

}

containers : { »

cna : { »

title : Windows DNS Spoofing Vulnerability (string)

datePublic : 2024-08-13T07:00:00.000Z (string)

cpeApplicability : [ »

0 : { »

nodes : [ »

0 : { »

operator : OR (string)

negate : false (boolean)

cpeMatch : [ »

0 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 10.0.17763.0 (string)

versionEndExcluding : 10.0.17763.6189 (string)

}

1 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 10.0.17763.0 (string)

versionEndExcluding : 10.0.17763.6189 (string)

}

2 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 10.0.20348.0 (string)

versionEndExcluding : 10.0.20348.2655 (string)

}

3 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 10.0.25398.0 (string)

versionEndExcluding : 10.0.25398.1085 (string)

}

4 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 10.0.14393.0 (string)

versionEndExcluding : 10.0.14393.7259 (string)

}

5 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* (string)

versionStartIncluding : 10.0.14393.0 (string)

versionEndExcluding : 10.0.14393.7259 (string)

}

6 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:* (string)

versionStartIncluding : 6.0.6003.0 (string)

versionEndExcluding : 6.0.6003.22825 (string)

}

7 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:* (string)

versionStartIncluding : 6.0.6003.0 (string)

versionEndExcluding : 6.0.6003.22825 (string)

}

8 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:* (string)

versionStartIncluding : 6.0.6003.0 (string)

versionEndExcluding : 6.0.6003.22825 (string)

}

9 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:* (string)

versionStartIncluding : 6.1.7601.0 (string)

versionEndExcluding : 6.1.7601.27277 (string)

}

10 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:* (string)

versionStartIncluding : 6.1.7601.0 (string)

versionEndExcluding : 6.1.7601.27277 (string)

}

11 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:* (string)

versionStartIncluding : 6.2.9200.0 (string)

versionEndExcluding : 6.2.9200.25031 (string)

}

12 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:* (string)

versionStartIncluding : 6.2.9200.0 (string)

versionEndExcluding : 6.2.9200.25031 (string)

}

13 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:* (string)

versionStartIncluding : 6.3.9600.0 (string)

versionEndExcluding : 6.3.9600.22134 (string)

}

14 : { »

vulnerable : true (boolean)

criteria : cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:* (string)

versionStartIncluding : 6.3.9600.0 (string)

versionEndExcluding : 6.3.9600.22134 (string)

}

]

}

]

}

]

affected : [ »

0 : { »

vendor : Microsoft (string)

product : Windows Server 2019 (string)

platforms : [ »

0 : x64-based Systems (string)

]

versions : [ »

0 : { »

version : 10.0.17763.0 (string)

lessThan : 10.0.17763.6189 (string)

versionType : custom (string)

status : affected (string)

}

]

}

1 : { »

vendor : Microsoft (string)

product : Windows Server 2019 (Server Core installation) (string)

platforms : [ »

0 : x64-based Systems (string)

]

versions : [ »

0 : { »

version : 10.0.17763.0 (string)

lessThan : 10.0.17763.6189 (string)

versionType : custom (string)

status : affected (string)

}

]

}

2 : { »

vendor : Microsoft (string)

product : Windows Server 2022 (string)

platforms : [ »

0 : x64-based Systems (string)

]

versions : [ »

0 : { »

version : 10.0.20348.0 (string)

lessThan : 10.0.20348.2655 (string)

versionType : custom (string)

status : affected (string)

}

]

}

3 : { »

vendor : Microsoft (string)

product : Windows Server 2022, 23H2 Edition (Server Core installation) (string)

platforms : [ »

0 : x64-based Systems (string)

]

versions : [ »

0 : { »

version : 10.0.25398.0 (string)

lessThan : 10.0.25398.1085 (string)

versionType : custom (string)

status : affected (string)

}

]

}

4 : { »

vendor : Microsoft (string)

product : Windows Server 2016 (string)

platforms : [ »

0 : x64-based Systems (string)

]

versions : [ »

0 : { »

version : 10.0.14393.0 (string)

lessThan : 10.0.14393.7259 (string)

versionType : custom (string)

status : affected (string)

}

]

}

5 : { »

vendor : Microsoft (string)

product : Windows Server 2016 (Server Core installation) (string)

platforms : [ »

0 : x64-based Systems (string)

]

versions : [ »

0 : { »

version : 10.0.14393.0 (string)

lessThan : 10.0.14393.7259 (string)

versionType : custom (string)

status : affected (string)

}

]

}

6 : { »

vendor : Microsoft (string)

product : Windows Server 2008 Service Pack 2 (string)

platforms : [ »

0 : 32-bit Systems (string)

]

versions : [ »

0 : { »

version : 6.0.6003.0 (string)

lessThan : 6.0.6003.22825 (string)

versionType : custom (string)

status : affected (string)

}

]

}

7 : { »

vendor : Microsoft (string)

product : Windows Server 2008 Service Pack 2 (Server Core installation) (string)

platforms : [ »

0 : 32-bit Systems (string)

1 : x64-based Systems (string)

]

versions : [ »

0 : { »

version : 6.0.6003.0 (string)

lessThan : 6.0.6003.22825 (string)

versionType : custom (string)

status : affected (string)

}

]

}

8 : { »

vendor : Microsoft (string)

product : Windows Server 2008 Service Pack 2 (string)

platforms : [ »

0 : x64-based Systems (string)

]

versions : [ »

0 : { »

version : 6.0.6003.0 (string)

lessThan : 6.0.6003.22825 (string)

versionType : custom (string)

status : affected (string)

}

]

}

9 : { »

vendor : Microsoft (string)

product : Windows Server 2008 R2 Service Pack 1 (string)

platforms : [ »

0 : x64-based Systems (string)

]

versions : [ »

0 : { »

version : 6.1.7601.0 (string)

lessThan : 6.1.7601.27277 (string)

versionType : custom (string)

status : affected (string)

}

]

}

10 : { »

vendor : Microsoft (string)

product : Windows Server 2008 R2 Service Pack 1 (Server Core installation) (string)

platforms : [ »

0 : x64-based Systems (string)

]

versions : [ »

0 : { »

version : 6.1.7601.0 (string)

lessThan : 6.1.7601.27277 (string)

versionType : custom (string)

status : affected (string)

}

]

}

11 : { »

vendor : Microsoft (string)

product : Windows Server 2012 (string)

platforms : [ »

0 : x64-based Systems (string)

]

versions : [ »

0 : { »

version : 6.2.9200.0 (string)

lessThan : 6.2.9200.25031 (string)

versionType : custom (string)

status : affected (string)

}

]

}

12 : { »

vendor : Microsoft (string)

product : Windows Server 2012 (Server Core installation) (string)

platforms : [ »

0 : x64-based Systems (string)

]

versions : [ »

0 : { »

version : 6.2.9200.0 (string)

lessThan : 6.2.9200.25031 (string)

versionType : custom (string)

status : affected (string)

}

]

}

13 : { »

vendor : Microsoft (string)

product : Windows Server 2012 R2 (string)

platforms : [ »

0 : x64-based Systems (string)

]

versions : [ »

0 : { »

version : 6.3.9600.0 (string)

lessThan : 6.3.9600.22134 (string)

versionType : custom (string)

status : affected (string)

}

]

}

14 : { »

vendor : Microsoft (string)

product : Windows Server 2012 R2 (Server Core installation) (string)

platforms : [ »

0 : x64-based Systems (string)

]

versions : [ »

0 : { »

version : 6.3.9600.0 (string)

lessThan : 6.3.9600.22134 (string)

versionType : custom (string)

status : affected (string)

}

]

}

]

descriptions : [ »

0 : { »

value : Windows DNS Spoofing Vulnerability (string)

lang : en-US (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : CWE-345: Insufficient Verification of Data Authenticity (string)

lang : en-US (string)

type : CWE (string)

cweId : CWE-345 (string)

}

]

}

]

providerMetadata : { »

orgId : f38d906d-7342-40ea-92c1-6c4a2c6478c8 (string)

shortName : microsoft (string)

dateUpdated : 2025-05-21T21:07:27.973Z (string)

}

references : [ »

0 : { »

name : Windows DNS Spoofing Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

]

url : https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37968 (string)

}

]

metrics : [ »

0 : { »

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en-US (string)

value : GENERAL (string)

}

]

cvssV3_1 : { »

version : 3.1 (string)

baseSeverity : HIGH (string)

baseScore : 7.5 (number)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C (string)

}

]

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-08-14T13:51:52.318644Z (string)

id : CVE-2024-37968 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-08-14T13:52:08.406Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-37968", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-14T13:51:52.318644Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-14T13:52:01.672Z"}}], "cna": {"title": "Windows DNS Spoofing Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Microsoft", "product": "Windows Server 2019", "versions": [{"status": "affected", "version": "10.0.17763.0", "lessThan": "10.0.17763.6189", "versionType": "custom"}], "platforms": ["x64-based Systems"]}, {"vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "versions": [{"status": "affected", "version": "10.0.17763.0", "lessThan": "10.0.17763.6189", "versionType": "custom"}], "platforms": ["x64-based Systems"]}, {"vendor": "Microsoft", "product": "Windows Server 2022", "versions": [{"status": "affected", "version": "10.0.20348.0", "lessThan": "10.0.20348.2655", "versionType": "custom"}], "platforms": ["x64-based Systems"]}, {"vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "versions": [{"status": "affected", "version": "10.0.25398.0", "lessThan": "10.0.25398.1085", "versionType": "custom"}], "platforms": ["x64-based Systems"]}, {"vendor": "Microsoft", "product": "Windows Server 2016", "versions": [{"status": "affected", "version": "10.0.14393.0", "lessThan": "10.0.14393.7259", "versionType": "custom"}], "platforms": ["x64-based Systems"]}, {"vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "versions": [{"status": "affected", "version": "10.0.14393.0", "lessThan": "10.0.14393.7259", "versionType": "custom"}], "platforms": ["x64-based Systems"]}, {"vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "versions": [{"status": "affected", "version": "6.0.6003.0", "lessThan": "6.0.6003.22825", "versionType": "custom"}], "platforms": ["32-bit Systems"]}, {"vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "versions": [{"status": "affected", "version": "6.0.6003.0", "lessThan": "6.0.6003.22825", "versionType": "custom"}], "platforms": ["32-bit Systems", "x64-based Systems"]}, {"vendor": "Microsoft", "product": "Windows Server 2008  Service Pack 2", "versions": [{"status": "affected", "version": "6.0.6003.0", "lessThan": "6.0.6003.22825", "versionType": "custom"}], "platforms": ["x64-based Systems"]}, {"vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1", "versions": [{"status": "affected", "version": "6.1.7601.0", "lessThan": "6.1.7601.27277", "versionType": "custom"}], "platforms": ["x64-based Systems"]}, {"vendor": "Microsoft", "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)", "versions": [{"status": "affected", "version": "6.1.7601.0", "lessThan": "6.1.7601.27277", "versionType": "custom"}], "platforms": ["x64-based Systems"]}, {"vendor": "Microsoft", "product": "Windows Server 2012", "versions": [{"status": "affected", "version": "6.2.9200.0", "lessThan": "6.2.9200.25031", "versionType": "custom"}], "platforms": ["x64-based Systems"]}, {"vendor": "Microsoft", "product": "Windows Server 2012 (Server Core installation)", "versions": [{"status": "affected", "version": "6.2.9200.0", "lessThan": "6.2.9200.25031", "versionType": "custom"}], "platforms": ["x64-based Systems"]}, {"vendor": "Microsoft", "product": "Windows Server 2012 R2", "versions": [{"status": "affected", "version": "6.3.9600.0", "lessThan": "6.3.9600.22134", "versionType": "custom"}], "platforms": ["x64-based Systems"]}, {"vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "versions": [{"status": "affected", "version": "6.3.9600.0", "lessThan": "6.3.9600.22134", "versionType": "custom"}], "platforms": ["x64-based Systems"]}], "datePublic": "2024-08-13T07:00:00.000Z", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37968", "name": "Windows DNS Spoofing Vulnerability", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en-US", "value": "Windows DNS Spoofing Vulnerability"}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-345", "description": "CWE-345: Insufficient Verification of Data Authenticity"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "10.0.17763.6189", "versionStartIncluding": "10.0.17763.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "10.0.17763.6189", "versionStartIncluding": "10.0.17763.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "10.0.20348.2655", "versionStartIncluding": "10.0.20348.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "10.0.25398.1085", "versionStartIncluding": "10.0.25398.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "10.0.14393.7259", "versionStartIncluding": "10.0.14393.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "10.0.14393.7259", "versionStartIncluding": "10.0.14393.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*", "vulnerable": true, "versionEndExcluding": "6.0.6003.22825", "versionStartIncluding": "6.0.6003.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:*", "vulnerable": true, "versionEndExcluding": "6.0.6003.22825", "versionStartIncluding": "6.0.6003.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:*", "vulnerable": true, "versionEndExcluding": "6.0.6003.22825", "versionStartIncluding": "6.0.6003.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*", "vulnerable": true, "versionEndExcluding": "6.1.7601.27277", "versionStartIncluding": "6.1.7601.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*", "vulnerable": true, "versionEndExcluding": "6.1.7601.27277", "versionStartIncluding": "6.1.7601.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", "vulnerable": true, "versionEndExcluding": "6.2.9200.25031", "versionStartIncluding": "6.2.9200.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*", "vulnerable": true, "versionEndExcluding": "6.2.9200.25031", "versionStartIncluding": "6.2.9200.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", "vulnerable": true, "versionEndExcluding": "6.3.9600.22134", "versionStartIncluding": "6.3.9600.0"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*", "vulnerable": true, "versionEndExcluding": "6.3.9600.22134", "versionStartIncluding": "6.3.9600.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2025-05-21T21:07:27.973Z"}}}, "cveMetadata": {"cveId": "CVE-2024-37968", "state": "PUBLISHED", "dateUpdated": "2025-05-21T21:07:27.973Z", "dateReserved": "2024-06-10T21:22:19.229Z", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2024-08-13T17:30:41.604Z", "assignerShortName": "microsoft"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-37968 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-08-14T13:51:52.318644Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-08-14T13:52:01.672Z (string)

}

]

cna : { »

title : Windows DNS Spoofing Vulnerability (string)

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

version : 3.1 (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C (string)

}

scenarios : [ »

0 : { »

lang : en-US (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Microsoft (string)

product : Windows Server 2019 (string)

versions : [ »

0 : { »

status : affected (string)

version : 10.0.17763.0 (string)

lessThan : 10.0.17763.6189 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : x64-based Systems (string)

]

}

1 : { »

vendor : Microsoft (string)

product : Windows Server 2019 (Server Core installation) (string)

versions : [ »

0 : { »

status : affected (string)

version : 10.0.17763.0 (string)

lessThan : 10.0.17763.6189 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : x64-based Systems (string)

]

}

2 : { »

vendor : Microsoft (string)

product : Windows Server 2022 (string)

versions : [ »

0 : { »

status : affected (string)

version : 10.0.20348.0 (string)

lessThan : 10.0.20348.2655 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : x64-based Systems (string)

]

}

3 : { »

vendor : Microsoft (string)

product : Windows Server 2022, 23H2 Edition (Server Core installation) (string)

versions : [ »

0 : { »

status : affected (string)

version : 10.0.25398.0 (string)

lessThan : 10.0.25398.1085 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : x64-based Systems (string)

]

}

4 : { »

vendor : Microsoft (string)

product : Windows Server 2016 (string)

versions : [ »

0 : { »

status : affected (string)

version : 10.0.14393.0 (string)

lessThan : 10.0.14393.7259 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : x64-based Systems (string)

]

}

5 : { »

vendor : Microsoft (string)

product : Windows Server 2016 (Server Core installation) (string)

versions : [ »

0 : { »

status : affected (string)

version : 10.0.14393.0 (string)

lessThan : 10.0.14393.7259 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : x64-based Systems (string)

]

}

6 : { »

vendor : Microsoft (string)

product : Windows Server 2008 Service Pack 2 (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.0.6003.0 (string)

lessThan : 6.0.6003.22825 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : 32-bit Systems (string)

]

}

7 : { »

vendor : Microsoft (string)

product : Windows Server 2008 Service Pack 2 (Server Core installation) (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.0.6003.0 (string)

lessThan : 6.0.6003.22825 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : 32-bit Systems (string)

1 : x64-based Systems (string)

]

}

8 : { »

vendor : Microsoft (string)

product : Windows Server 2008 Service Pack 2 (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.0.6003.0 (string)

lessThan : 6.0.6003.22825 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : x64-based Systems (string)

]

}

9 : { »

vendor : Microsoft (string)

product : Windows Server 2008 R2 Service Pack 1 (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.1.7601.0 (string)

lessThan : 6.1.7601.27277 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : x64-based Systems (string)

]

}

10 : { »

vendor : Microsoft (string)

product : Windows Server 2008 R2 Service Pack 1 (Server Core installation) (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.1.7601.0 (string)

lessThan : 6.1.7601.27277 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : x64-based Systems (string)

]

}

11 : { »

vendor : Microsoft (string)

product : Windows Server 2012 (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.2.9200.0 (string)

lessThan : 6.2.9200.25031 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : x64-based Systems (string)

]

}

12 : { »

vendor : Microsoft (string)

product : Windows Server 2012 (Server Core installation) (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.2.9200.0 (string)

lessThan : 6.2.9200.25031 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : x64-based Systems (string)

]

}

13 : { »

vendor : Microsoft (string)

product : Windows Server 2012 R2 (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.3.9600.0 (string)

lessThan : 6.3.9600.22134 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : x64-based Systems (string)

]

}

14 : { »

vendor : Microsoft (string)

product : Windows Server 2012 R2 (Server Core installation) (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.3.9600.0 (string)

lessThan : 6.3.9600.22134 (string)

versionType : custom (string)

}

]

platforms : [ »

0 : x64-based Systems (string)

]

}

]

datePublic : 2024-08-13T07:00:00.000Z (string)

references : [ »

0 : { »

url : https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37968 (string)

name : Windows DNS Spoofing Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

]

}

]

descriptions : [ »

0 : { »

lang : en-US (string)

value : Windows DNS Spoofing Vulnerability (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en-US (string)

type : CWE (string)

cweId : CWE-345 (string)

description : CWE-345: Insufficient Verification of Data Authenticity (string)

}

]

}

]

cpeApplicability : [ »

0 : { »

nodes : [ »

0 : { »

negate : false (boolean)

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 10.0.17763.6189 (string)

versionStartIncluding : 10.0.17763.0 (string)

}

1 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 10.0.17763.6189 (string)

versionStartIncluding : 10.0.17763.0 (string)

}

2 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 10.0.20348.2655 (string)

versionStartIncluding : 10.0.20348.0 (string)

}

3 : { »

criteria : cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 10.0.25398.1085 (string)

versionStartIncluding : 10.0.25398.0 (string)

}

4 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 10.0.14393.7259 (string)

versionStartIncluding : 10.0.14393.0 (string)

}

5 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* (string)

vulnerable : true (boolean)

versionEndExcluding : 10.0.14393.7259 (string)

versionStartIncluding : 10.0.14393.0 (string)

}

6 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.0.6003.22825 (string)

versionStartIncluding : 6.0.6003.0 (string)

}

7 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x64:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.0.6003.22825 (string)

versionStartIncluding : 6.0.6003.0 (string)

}

8 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2008_sp2:*:*:*:*:*:*:x86:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.0.6003.22825 (string)

versionStartIncluding : 6.0.6003.0 (string)

}

9 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.1.7601.27277 (string)

versionStartIncluding : 6.1.7601.0 (string)

}

10 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.1.7601.27277 (string)

versionStartIncluding : 6.1.7601.0 (string)

}

11 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.2.9200.25031 (string)

versionStartIncluding : 6.2.9200.0 (string)

}

12 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.2.9200.25031 (string)

versionStartIncluding : 6.2.9200.0 (string)

}

13 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.3.9600.22134 (string)

versionStartIncluding : 6.3.9600.0 (string)

}

14 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:* (string)

vulnerable : true (boolean)

versionEndExcluding : 6.3.9600.22134 (string)

versionStartIncluding : 6.3.9600.0 (string)

}

]

operator : OR (string)

}

]

}

]

providerMetadata : { »

orgId : f38d906d-7342-40ea-92c1-6c4a2c6478c8 (string)

shortName : microsoft (string)

dateUpdated : 2025-05-21T21:07:27.973Z (string)

}

cveMetadata : { »

cveId : CVE-2024-37968 (string)

state : PUBLISHED (string)

dateUpdated : 2025-05-21T21:07:27.973Z (string)

dateReserved : 2024-06-10T21:22:19.229Z (string)

assignerOrgId : f38d906d-7342-40ea-92c1-6c4a2c6478c8 (string)

datePublished : 2024-08-13T17:30:41.604Z (string)

assignerShortName : microsoft (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*", "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*", "matchCriteriaId": "28824912-3E9D-4E1E-AE1F-F9700DB892C0", "versionEndExcluding": "6.2.9200.25031", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", "matchCriteriaId": "7CA31F69-6718-4968-8B0D-88728179F3CA", "versionEndExcluding": "10.0.14393.7259", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", "matchCriteriaId": "A2267317-26DF-4EB8-A7EA-EA467727DA71", "versionEndExcluding": "10.0.17763.6189", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E3975C0-EA3C-4B85-94BC-43BA94474FCA", "versionEndExcluding": "10.0.20348.2655", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", "matchCriteriaId": "094C36FE-9CCB-4148-AA0F-5727D6933768", "versionEndExcluding": "10.0.25398.1085", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Windows DNS Spoofing Vulnerability"}, {"lang": "es", "value": "Vulnerabilidad de suplantaci\u00f3n de DNS de Windows"}], "id": "CVE-2024-37968", "lastModified": "2024-08-16T20:54:18.347", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "secure@microsoft.com", "type": "Primary"}]}, "published": "2024-08-13T18:15:09.757", "references": [{"source": "secure@microsoft.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37968"}], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-345"}], "source": "secure@microsoft.com", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* (string)

matchCriteriaId : 5F422A8C-2C4E-42C8-B420-E0728037E15C (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* (string)

matchCriteriaId : AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 28824912-3E9D-4E1E-AE1F-F9700DB892C0 (string)

versionEndExcluding : 6.2.9200.25031 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* (string)

matchCriteriaId : DB18C4CE-5917-401E-ACF7-2747084FD36E (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 7CA31F69-6718-4968-8B0D-88728179F3CA (string)

versionEndExcluding : 10.0.14393.7259 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A2267317-26DF-4EB8-A7EA-EA467727DA71 (string)

versionEndExcluding : 10.0.17763.6189 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8E3975C0-EA3C-4B85-94BC-43BA94474FCA (string)

versionEndExcluding : 10.0.20348.2655 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 094C36FE-9CCB-4148-AA0F-5727D6933768 (string)

versionEndExcluding : 10.0.25398.1085 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Windows DNS Spoofing Vulnerability (string)

}

1 : { »

lang : es (string)

value : Vulnerabilidad de suplantación de DNS de Windows (string)

}

]

id : CVE-2024-37968 (string)

lastModified : 2024-08-16T20:54:18.347 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : secure@microsoft.com (string)

type : Primary (string)

}

]

}

published : 2024-08-13T18:15:09.757 (string)

references : [ »

0 : { »

source : secure@microsoft.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37968 (string)

}

]

sourceIdentifier : secure@microsoft.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-345 (string)

}

]

source : secure@microsoft.com (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object