CVE-2024-38195
highpriority · track · 0EPSS 0.005 · 44 %ileDEEUNLRUUSEPSS · scored 2026-10-27
Azure CycleCloud Remote Code Execution Vulnerability
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedAzure CycleCloud 8.0.0msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.0.1msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.0.2msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.1.0msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.1.1msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.2.0msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.2.1msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.2.2msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.3.0msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.4.0msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.4.1msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.4.2msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.5.0msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.6.0msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.6.1msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 - FixedAzure CycleCloud 8.6.2msrc_csaf
8.6.3:Security Update:https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (98)
Products and version ranges known to be affected.
- Microsoft Azure Connected Machine Agentall versionscert_bundDEcpe:/a:microsoft:azure:connected_machine_agent
advisories (3)
Vendor and ecosystem advisories describing this.
- NCSC-2024-0335Kwetsbaarheden verholpen in Microsoft Azure componentenNL2024-08-13csaf · ncsc_nlNL
Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten.
- WID-SEC-W-2024-1822Microsoft Azure: Mehrere SchwachstellenDeutsch2024-08-13csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure und Microsoft Azure Stack ausnutzen, um seine Privilegien zu erweitern, einen Spoofing-Angriff durchzuführen oder beliebigen Code auszuführen.
- msrc_CVE-2024-38195Azure CycleCloud Remote Code Execution Vulnerability2024-08-13csaf · msrc_csafUS
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (4)
External citations — patches, advisories, analysis.
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan