SQL Server Native Client Remote Code Execution Vulnerability

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2024-38255,     CVE-2024-43459, CVE-2024-43462, CVE-2024-48993,     CVE-2024-48994, CVE-2024-48995, CVE-2024-48996,     CVE-2024-48997, CVE-2024-48998, CVE-2024-48999,     CVE-2024-49000, CVE-2024-49001, CVE-2024-49002,     CVE-2024-49003, CVE-2024-49004, CVE-2024-49005,     CVE-2024-49006, CVE-2024-49007, CVE-2024-49008,     CVE-2024-49009, CVE-2024-49010, CVE-2024-49011,     CVE-2024-49012, CVE-2024-49013, CVE-2024-49014,     CVE-2024-49015, CVE-2024-49016, CVE-2024-49017,     CVE-2024-49018, CVE-2024-49021, CVE-2024-49043)

ID	Name	Product	Family	Severity
211472	Security Updates for Microsoft SQL Server (November 2024)	Nessus	Windows : Microsoft Bulletins	high
211471	Security Updates for Microsoft SQL Server (September 2024) (Remote)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2024-49002

high

Tenable Plugins

high

high