{"id":"CVE-2024-43469","state":"PUBLISHED","title":"Azure CycleCloud Remote Code Execution Vulnerability","description":"Azure CycleCloud Remote Code Execution Vulnerability","publishedAt":"2024-09-10T16:54:15.755Z","updatedAt":"2026-08-10T15:10:51.432Z","severity":{"score":8.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Azure CycleCloud","Microsoft Azure CycleCloud 8.0.0","Microsoft Azure CycleCloud 8.0.1","Microsoft Azure CycleCloud 8.0.2","Microsoft Azure CycleCloud 8.1.0","Microsoft Azure CycleCloud 8.1.1","Microsoft Azure CycleCloud 8.2.0","Microsoft Azure CycleCloud 8.2.1","Microsoft Azure CycleCloud 8.2.2","Microsoft Azure CycleCloud 8.3.0","Microsoft Azure CycleCloud 8.4.0","Microsoft Azure CycleCloud 8.4.1","Microsoft Azure CycleCloud 8.4.2","Microsoft Azure CycleCloud 8.5.0","Microsoft Azure CycleCloud 8.6.0"],"affected":[{"vendor":"Microsoft","product":"Azure CycleCloud","versions":[{"version":"8.6.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud","versions":[{"version":"8.6.3","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.0","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.1","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.2","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.0","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.1","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.0","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.1","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.2","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.3.0","versions":[{"version":"8.3.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.0","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.1","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.2","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.5.0","versions":[{"version":"8.5.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.6.0","versions":[{"version":"8.6.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43469"],"weaknesses":["CWE-94"],"ingestedAt":"2026-10-29T20:07:47.831Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/43xxx/CVE-2024-43469.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-43469","state":"PUBLISHED","datePublished":"2024-09-10T16:54:15.755Z","dateUpdated":"2026-08-10T15:10:51.432Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2024-08-14T01:08:33.517Z"},"containers":{"cna":{"title":"Azure CycleCloud Remote Code Execution Vulnerability","descriptions":[{"lang":"en-US","value":"Azure CycleCloud Remote Code Execution Vulnerability"}],"affected":[{"vendor":"Microsoft","product":"Azure CycleCloud","versions":[{"version":"8.6.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud","versions":[{"version":"8.6.3","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.0","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.1","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.2","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.0","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.1","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.0","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.1","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.2","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.3.0","versions":[{"version":"8.3.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.0","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.1","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.2","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.5.0","versions":[{"version":"8.5.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.6.0","versions":[{"version":"8.6.0","status":"affected","lessThan":"8.6.4","versionType":"custom"}]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43469","name":"Azure CycleCloud Remote Code Execution Vulnerability","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"HIGH","baseScore":8.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-94","description":"CWE-94: Improper Control of Generation of Code ('Code Injection')","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2026-08-10T15:10:51.432Z"},"datePublic":"2024-09-10T07:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.1.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.1.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndExcluding":"8.6.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.3","versionEndExcluding":"8.6.4"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-10T18:32:10.339265Z","id":"CVE-2024-43469","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-10T18:33:54.472Z"}}]}}}