Write a script that can detect a CVE
publish by @oruga
02 Jan 2025
#x_detection
CVE-2024-49138 - Windows Common Log File System Driver Elevation of Privilege Vulnerability - Detection Script
by @oruga
02 Jan 2025
#x_detection
Write a script that can detect a CVE
publishCVE-2024-49138 - Windows Common Log File System Driver Elevation of Privilege Vulnerability - Detection Script
OS
Windows Server 2019Microsoft
10.0.17763.7009.*
18410.*
10.0.17763.6414.*
10.0.17763.6659.*
10.0.17763.5458.*
10.0.17763.3770.*
10.0.17763.5936.*
10.0.17763.5820.*
10.0.17763.6532.*
10.0.17763.5696.*
Windows Server 2016Microsoft
10.0.14393.7876.*
10.0.14393.7606.*
10.0.14393.7428.*
10.0.14393.6897.*
10.0.14393.5582.*
10.0.14393.6981.*
10.0.14393.6796.*
10.0.14393.7070.*
10.0.14393.7515.*
10.0.14393.7336.*
Windows Server 2012Microsoft
7375.*
6.2.9200.25073.*
6.2.9200.24975.*
6.2.9200.25031.*
6.2.9200.24919.*
6.2.9200.24768.*
6.2.9200.24116.*
4113.*
7378.*
R2.*
Windows Server 2008Microsoft
SP2.*
SP2.X64
SP2.X32
SP2.*
SP2.*
R2.SP1
R2.SP1
R2.SP1
R2.SP1
R2.SP1
WS2
Windows Server 2025Microsoft
26613.*
26615.*
10.0.26100.3403.*
26614.*
10.0.26100.3107.*
10.0.26100.2314.*
24H2.*
*.*
*.*
-.*
W12
Windows 11 24H2Microsoft
10.0.26100.3403.*
10.0.26100.3403.*
10.0.26100.3107.*
10.0.26100.3107.*
10.0.26100.3194.*
10.0.26100.3194.*
10.0.26100.2894.*
10.0.26100.2894.*
10.0.26100.2314.*
10.0.26100.2314.*
WS2
Windows Server 2022 23H2Microsoft
10.0.25398.1128.*
10.0.25398.1128.*
10.0.25398.1128.*
10.0.25398.1085.*
10.0.25398.1085.*
10.0.25398.1085.*
10.0.25398.950.*
10.0.25398.950.*
10.0.25398.950.*
10.0.25398.1189.*
W12
Windows 11 23H2Microsoft
10.0.22631.5039.*
10.0.22631.5039.*
10.0.22631.4890.*
10.0.22631.4890.*
10.0.22631.4751.*
10.0.22621.4751.*
10.0.22631.4460.*
10.0.22631.4460.*
10.0.22631.3880.*
10.0.22631.3880.*
W12
Windows 11 22H2Microsoft
10.0.22621.5039.*
10.0.22621.5039.*
10.0.22621.4890.*
10.0.22621.4890.*
10.0.22621.4751.*
10.0.22621.4751.*
10.0.22621.3958.*
10.0.22621.3958.*
10.0.22621.3155.*
10.0.22621.3155.*
W12
Windows 10 22H2Microsoft
10.0.19045.5608.*
10.0.19045.5608.*
10.0.19045.5608.*
10.0.19045.5487.*
10.0.19045.5487.*
10.0.19045.5487.*
10.0.19045.5371.*
10.0.19045.5371.*
10.0.19045.5371.*
10.0.19045.5247.*
W12
Windows 10 21H2Microsoft
10.0.19044.5608.*
10.0.19044.5608.*
10.0.19044.5608.*
10.0.19044.5487.*
10.0.19044.5487.*
10.0.19044.5487.*
10.0.19044.5371.*
10.0.19044.5371.*
10.0.19044.5371.*
10.0.19044.5011.*
W11
Windows 10 1607Microsoft
10.0.14393.7785.*
10.0.14393.7785.*
10.0.10240.20915.*
10.0.10240.20915.*
10.0.14393.7699.*
10.0.14393.7699.*
10.0.14393.7606.*
10.0.14393.7606.*
10.0.14393.7428.*
10.0.14393.6897.*
W11
Windows 10 1507Microsoft
10.0.10240.20915.*
10.0.10240.20915.*
10.0.10240.20890.*
10.0.10240.20890.*
10.0.10240.20857.*
10.0.10240.20857.*
10.0.10240.20796.*
10.0.10240.20596.*
10.0.10240.20596.*
10.0.10240.20651.*
W11
Windows 10 1809Microsoft
10.0.17763.6893.*
10.0.17763.6893.*
10.0.17763.6775.*
10.0.17763.6414.*
10.0.17763.6659.*
10.0.17763.6659.*
10.0.17763.5820.*
10.0.17763.5820.*
10.0.17763.5820.*
10.0.17763.6532.*
Windows Server 2022Microsoft
10.0.20348.2458.*
10.0.20348.2402.*
10.0.20348.2402.*
10.0.20348.2402.*
10.0.20348.2333.*
10.0.20348.770.*
10.0.20348.1903.*
10.0.20348.2700.*
10.0.20348.2700.*
10.0.20348.2700.*
PoC video
xdetection
Description
@oruga
66 posts
Total vcoins
17.6K
Comments (0)