Analysis of CVE-2024 Vulnerabilities in Windows Services

• •CVE-2024-38063 is a critical zero-click RCE vulnerability.
• •CVE-2024-38077 affects the Remote Desktop Licensing Service.
• •Metasploit was used for exploitation in controlled lab assessments.

Recent assessments have revealed vulnerabilities in Windows services, particularly focusing on CVE-2024-38063 and CVE-2024-38077. The vulnerabilities include a remote, zero-click exploit leading to Remote Code Execution (RCE) and issues in the Remote Desktop Licensing Service. The assessments were conducted in a controlled lab environment, utilizing tools like Metasploit for exploitation. The findings emphasize the importance of understanding the Common Vulnerability Scoring System (CVSS) for prioritizing vulnerabilities. Security professionals are urged to monitor these CVEs for potential exploitation in the wild. The assessments are part of an educational initiative in ethical hacking, highlighting the need for ongoing research into vulnerabilities and exploits.