cbcvebase.
CVE-2024-26212
published 2024-04-09

CVE-2024-26212: DHCP Server Service Denial of Service Vulnerability

PriorityP353high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
62.58%
99.1th percentile
DHCP Server Service Denial of Service Vulnerability

Affected

22 ranges
VendorProductVersion rangeFixed in
microsoftwindows_server_2008
microsoftwindows_server_2008_r2_service_pack_1>= 6.1.7601.0 < 6.1.7601.270676.1.7601.27067
microsoftwindows_server_2008_service_pack_2>= 6.0.6003.0 < 6.0.6003.226186.0.6003.22618
microsoftwindows_server_2012
microsoftwindows_server_2012>= 6.2.9200.0 < 6.2.9200.248216.2.9200.24821
microsoftwindows_server_2012_r2>= 6.3.9600.0 < 6.3.9600.219246.3.9600.21924
microsoftwindows_server_2016< 10.0.14393.689710.0.14393.6897
microsoftwindows_server_2016>= 10.0.14393.0 < 10.0.14393.689710.0.14393.6897
microsoftwindows_server_2019< 10.0.17763.569610.0.17763.5696
microsoftwindows_server_2019>= 10.0.17763.0 < 10.0.17763.569610.0.17763.5696
microsoftwindows_server_2022< 10.0.20348.240210.0.20348.2402
microsoftwindows_server_2022>= 10.0.20348.0 < 10.0.20348.240210.0.20348.2402
microsoftwindows_server_2022_23h2< 10.0.25398.83010.0.25398.830
msrcwindows_server_2008_for_32-bit_systems_service_pack_2
msrcwindows_server_2008_for_x64-based_systems_service_pack_2
msrcwindows_server_2008_r2_for_x64-based_systems_service_pack_1
msrcwindows_server_2012
msrcwindows_server_2012_r2
msrcwindows_server_2016
msrcwindows_server_2019
msrcwindows_server_2022
msrcwindows_server_2022_23h2_edition

Detection & IOCsextracted from sources · hover to see the quote

  • CVE-2024-26212 targets the Windows DHCP Server Service; monitor for anomalous or malformed DHCP traffic directed at Windows Server DHCP instances that could cause a denial of service condition.
  • Microsoft rates exploitation as 'More Likely' for the latest software release despite no known public exploit or active exploitation at time of disclosure; prioritize patching and monitoring of DHCP Server Service on all affected Windows Server versions.
  • Affected platforms span a wide range of Windows Server versions (2008 SP2 through 2022 23H2); ensure DHCP Server Service is patched or mitigated on all of these.
  • ·No public proof-of-concept or active exploitation has been confirmed at time of disclosure; however, Microsoft assesses exploitation as 'More Likely' for the latest software release, warranting elevated vigilance.
  • ·The vulnerability is limited to the Windows DHCP Server Service role; systems not running the DHCP Server role are not affected.

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_msrc7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.