CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-43513

Medium Severity
Microsoft
SVRS
30/100

CVSSv3
6.4/10

EPSS
0.00168/1

CVE-2024-43513 is a BitLocker security feature bypass vulnerability. This flaw could allow unauthorized access, potentially compromising data encryption.

CVE-2024-43513 represents a security vulnerability in BitLocker, Microsoft's drive encryption feature, potentially allowing attackers to bypass security measures and access protected data. While the CVSS score is 6.4 (Medium), indicating a moderate level of concern, the SOCRadar Vulnerability Risk Score (SVRS) is only 30, suggesting that it might not be as actively exploited or discussed across threat intelligence sources as other vulnerabilities. However, the "In The Wild" tag means that it is being exploited. This vulnerability is significant because it directly impacts data confidentiality and the integrity of systems relying on BitLocker for full disk encryption. Organizations should promptly review the vendor advisory and apply necessary patches to mitigate potential risks, despite the relatively low SVRS.

In The Wild
Vendor-advisory
CVSS:3.1
AV:P
AC:H
PR:N
UI:N
S:U
C:H
I:H
A:H
E:U
RL:O
RC:C
2024-10-08

2025-01-29

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

The October 2024 Security Update Review
Dustin Childs2024-12-02
The October 2024 Security Update Review | It’s the spooky season, and there’s nothing spookier than security patches – at least in my world. Microsoft and Adobe have released their latest patches, and no bones about it, there are some skeletons in those closets. Take a break from your regular activities and join us as we review the details of their latest security alerts. If you’d rather watch the full video recap covering the entire release, you can check it out here: Adobe Patches for
zerodayinitiative.com
rss
forum
news
Patch Tuesday - October 2024
Adam Barnett2024-10-08
Patch Tuesday - October 2024 | 5 zero-days. Configuration Manager pre-auth RCE. RDP RPC pre-auth RPC. Winlogon EoP. Hyper-V container escape. curl o-day RCE late patch. Management console zero-day RCE. Windows 11 lifecycle changes.Microsoft is addressing 118 vulnerabilities this October 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for five of the vulnerabilities published today, although it does not rate any of these as
cve-2024-43583
cve-2024-43590
cve-2024-43520
cve-2024-43546
1.754
2024-10-09
1.754 | Newly Added (102)Microsoft Windows Secure Kernel Mode CVE-2024-43516 Elevation of Privilege VulnerabilityMicrosoft Windows Routing and Remote Access Service CVE-2024-38261 Remote Code Execution VulnerabilityMicrosoft .NET and Visual Studio CVE-2024-38229 Remote Code Execution Vulnerability<
cve-2024-43567
cve-2024-43520
cve-2024-43518
cve-2024-38262

Social Media

CVE-2024-43513: BitLocker Security Vulnerability Explained https://t.co/aBZthJut4G
0
0
0

Affected Software

Configuration 1
TypeVendorProduct
OSMicrosoftwindows_10_1507
OSMicrosoftwindows_10_1607
OSMicrosoftwindows_11_22h2
OSMicrosoftwindows_10_21h2
OSMicrosoftwindows_10_1809
OSMicrosoftwindows_11_21h2
OSMicrosoftwindows_10_22h2
OSMicrosoftwindows_server_2022
OSMicrosoftwindows_11_23h2
OSMicrosoftwindows_server_2016
OSMicrosoftwindows_server_2019
OSMicrosoftwindows_server_2022_23h2
OSMicrosoftwindows_server_2012

References

ReferenceLink
[email protected]https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43513
BITLOCKER SECURITY FEATURE BYPASS VULNERABILITYhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43513

CWE Details

CWE IDCWE NameDescription
CWE-693Protection Mechanism FailureThe product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence