{"id":"CVE-2024-43602","state":"PUBLISHED","title":"Azure CycleCloud Remote Code Execution Vulnerability","description":"Azure CycleCloud Remote Code Execution Vulnerability","publishedAt":"2024-11-12T17:53:37.113Z","updatedAt":"2025-07-08T15:41:00.654Z","severity":{"score":9.9,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Azure CycleCloud","Microsoft Azure CycleCloud 8.0.0","Microsoft Azure CycleCloud 8.0.1","Microsoft Azure CycleCloud 8.6.0","Microsoft Azure CycleCloud 8.0.2","Microsoft Azure CycleCloud 8.1.0","Microsoft Azure CycleCloud 8.2.0","Microsoft Azure CycleCloud 8.2.1","Microsoft Azure CycleCloud 8.2.2","Microsoft Azure CycleCloud 8.4.1","Microsoft Azure CycleCloud 8.1.1","Microsoft Azure CycleCloud 8.4.2","Microsoft Azure CycleCloud 8.4.0","Microsoft Azure CycleCloud 8.5.0","Microsoft Azure CycleCloud 8.3.0"],"affected":[{"vendor":"Microsoft","product":"Azure CycleCloud","versions":[{"version":"8.6.3","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud","versions":[{"version":"8.6.4","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.0","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.1","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.6.0","versions":[{"version":"8.6.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud","versions":[{"version":"8.6.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.2","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.0","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.0","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.1","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.2","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.1","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.1","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.2","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.0","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.5.0","versions":[{"version":"8.5.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.3.0","versions":[{"version":"8.3.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43602"],"weaknesses":["CWE-285"],"ingestedAt":"2026-10-29T20:07:47.831Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/43xxx/CVE-2024-43602.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-43602","state":"PUBLISHED","datePublished":"2024-11-12T17:53:37.113Z","dateUpdated":"2025-07-08T15:41:00.654Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2024-08-14T01:08:33.550Z"},"containers":{"cna":{"title":"Azure CycleCloud Remote Code Execution Vulnerability","descriptions":[{"lang":"en-US","value":"Azure CycleCloud Remote Code Execution Vulnerability"}],"affected":[{"vendor":"Microsoft","product":"Azure CycleCloud","versions":[{"version":"8.6.3","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud","versions":[{"version":"8.6.4","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.0","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.1","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.6.0","versions":[{"version":"8.6.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud","versions":[{"version":"8.6.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.2","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.0","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.0","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.1","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.2","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.1","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.1","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.2","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.0","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.5.0","versions":[{"version":"8.5.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.3.0","versions":[{"version":"8.3.0","status":"affected","lessThan":"8.6.5","versionType":"custom"}],"platforms":["Unknown"]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43602","name":"Azure CycleCloud Remote Code Execution Vulnerability","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"CRITICAL","baseScore":9.9,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-285","description":"CWE-285: Improper Authorization","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2025-07-08T15:41:00.654Z"},"datePublic":"2024-11-12T08:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.3","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.4","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.1.0","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.1.0","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndExcluding":"8.6.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.0","versionEndExcluding":"8.6.5"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-11-13T16:27:36.847807Z","id":"CVE-2024-43602","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-11-13T16:27:50.851Z"}}]}}}