SERVER-WEBAPP Microsoft Windows CreateProcess cmd.exe command injection attempt

IPS-NPA

1 SID: 64241

Description

Detects an attempt to exploit CVE-2024-1874, CVE-2024-24576, and CVE-2024-3566, a command injection flaw that can run operating system commands on the server in Microsoft Windows CreateProcess cmd.exe.

CVEs

CVE-2024-1874 CVE-2024-24576 CVE-2024-3566

Related malware families

Microsoft