Vulnerability: Azure Stack HCI is vulnerable to attacks

If administrators host virtual machines with Azure Stack HCI, they must install the latest version to prevent attacks.

Anzeige

Close the vulnerability

In a warning message, Microsoft writes: The vulnerability (CVE-2024-49060) is classified by threat level.“high“. According to the authors, no attack is known so far, but it could happen soon. Azure Stack HCI 2411provides a solution.

If attacks are successful, attackers may gain higher rights. How this might work in detail is not yet known. Microsoft notes that in order to access a vulnerable Azure Stack HCI cluster, attackers must already be authenticated for an attack. This can be achieved, for example, via SSH.

(des)