CVE-2024-49112 is a Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. This critical vulnerability has been assigned a CVSS score of 9.8, indicating a high impact on confidentiality, integrity, and availability (C:H/I:H/A:H).

The vulnerability is related to an integer overflow or wraparound (CWE-190) in the LDAP implementation. This issue could allow remote attackers to execute arbitrary code on vulnerable systems by sending specially crafted LDAP requests.

Attackers can exploit this flaw remotely, requiring no authentication or user interaction.

Exploitation results in the attacker gaining full control of the affected system.

To mitigate CVE-2024-49112:

1. Apply Patches: Ensure all systems are updated with the latest security patches from Microsoft. Refer to their official advisory.

2. Restrict LDAP Access:
Limit access to LDAP services by implementing network-level access controls, such as firewalls.

Use secure LDAP (LDAPS) to encrypt LDAP traffic.
https://msrc