// For flags

CVE-2024-43545

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Attend
*SSVC
Descriptions

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:Attend
Exploitation
None
Automatable
Yes
Tech. Impact
Partial
* Organization's Worst-case Scenario
Timeline
  • 2024-08-14 CVE Reserved
  • 2024-10-08 CVE Published
  • 2025-01-29 CVE Updated
  • 2025-04-15 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-400: Uncontrolled Resource Consumption
CAPEC
References (1)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Microsoft
Search vendor "Microsoft"
Windows Server 2019
Search vendor "Microsoft" for product "Windows Server 2019"
>= 10.0.17763.0 < 10.0.17763.6414
Search vendor "Microsoft" for product "Windows Server 2019" and version " >= 10.0.17763.0 < 10.0.17763.6414"
en
Affected
Microsoft
Search vendor "Microsoft"
Windows Server 2019 (Server Core Installation)
Search vendor "Microsoft" for product "Windows Server 2019 (Server Core Installation)"
>= 10.0.17763.0 < 10.0.17763.6414
Search vendor "Microsoft" for product "Windows Server 2019 (Server Core Installation)" and version " >= 10.0.17763.0 < 10.0.17763.6414"
en
Affected
Microsoft
Search vendor "Microsoft"
Windows Server 2022
Search vendor "Microsoft" for product "Windows Server 2022"
>= 10.0.20348.0 < 10.0.20348.2762
Search vendor "Microsoft" for product "Windows Server 2022" and version " >= 10.0.20348.0 < 10.0.20348.2762"
en
Affected
Microsoft
Search vendor "Microsoft"
Windows Server 2022, 23H2 Edition (Server Core Installation)
Search vendor "Microsoft" for product "Windows Server 2022, 23H2 Edition (Server Core Installation)"
>= 10.0.25398.0 < 10.0.25398.1189
Search vendor "Microsoft" for product "Windows Server 2022, 23H2 Edition (Server Core Installation)" and version " >= 10.0.25398.0 < 10.0.25398.1189"
en
Affected
Microsoft
Search vendor "Microsoft"
Windows Server 2016
Search vendor "Microsoft" for product "Windows Server 2016"
>= 10.0.14393.0 < 10.0.14393.7428
Search vendor "Microsoft" for product "Windows Server 2016" and version " >= 10.0.14393.0 < 10.0.14393.7428"
en
Affected
Microsoft
Search vendor "Microsoft"
Windows Server 2016 (Server Core Installation)
Search vendor "Microsoft" for product "Windows Server 2016 (Server Core Installation)"
>= 10.0.14393.0 < 10.0.14393.7428
Search vendor "Microsoft" for product "Windows Server 2016 (Server Core Installation)" and version " >= 10.0.14393.0 < 10.0.14393.7428"
en
Affected
Microsoft
Search vendor "Microsoft"
Windows Server 2008 Service Pack 2
Search vendor "Microsoft" for product "Windows Server 2008 Service Pack 2"
>= 6.0.6003.0 < 6.0.6003.22918
Search vendor "Microsoft" for product "Windows Server 2008 Service Pack 2" and version " >= 6.0.6003.0 < 6.0.6003.22918"
en
Affected
Microsoft
Search vendor "Microsoft"
Windows Server 2008 Service Pack 2 (Server Core Installation)
Search vendor "Microsoft" for product "Windows Server 2008 Service Pack 2 (Server Core Installation)"
>= 6.0.6003.0 < 6.0.6003.22918
Search vendor "Microsoft" for product "Windows Server 2008 Service Pack 2 (Server Core Installation)" and version " >= 6.0.6003.0 < 6.0.6003.22918"
en
Affected
Microsoft
Search vendor "Microsoft"
Windows Server 2008 Service Pack 2
Search vendor "Microsoft" for product "Windows Server 2008 Service Pack 2"
>= 6.0.6003.0 < 6.0.6003.22918
Search vendor "Microsoft" for product "Windows Server 2008 Service Pack 2" and version " >= 6.0.6003.0 < 6.0.6003.22918"
en
Affected
Microsoft
Search vendor "Microsoft"
Windows Server 2008 R2 Service Pack 1
Search vendor "Microsoft" for product "Windows Server 2008 R2 Service Pack 1"
>= 6.1.7601.0 < 6.1.7601.27366
Search vendor "Microsoft" for product "Windows Server 2008 R2 Service Pack 1" and version " >= 6.1.7601.0 < 6.1.7601.27366"
en
Affected
Microsoft
Search vendor "Microsoft"
Windows Server 2008 R2 Service Pack 1 (Server Core Installation)
Search vendor "Microsoft" for product "Windows Server 2008 R2 Service Pack 1 (Server Core Installation)"
>= 6.1.7601.0 < 6.1.7601.27366
Search vendor "Microsoft" for product "Windows Server 2008 R2 Service Pack 1 (Server Core Installation)" and version " >= 6.1.7601.0 < 6.1.7601.27366"
en
Affected
Microsoft
Search vendor "Microsoft"
Windows Server 2012
Search vendor "Microsoft" for product "Windows Server 2012"
>= 6.2.9200.0 < 6.2.9200.25118
Search vendor "Microsoft" for product "Windows Server 2012" and version " >= 6.2.9200.0 < 6.2.9200.25118"
en
Affected
Microsoft
Search vendor "Microsoft"
Windows Server 2012 (Server Core Installation)
Search vendor "Microsoft" for product "Windows Server 2012 (Server Core Installation)"
>= 6.2.9200.0 < 6.2.9200.25118
Search vendor "Microsoft" for product "Windows Server 2012 (Server Core Installation)" and version " >= 6.2.9200.0 < 6.2.9200.25118"
en
Affected
Microsoft
Search vendor "Microsoft"
Windows Server 2012 R2
Search vendor "Microsoft" for product "Windows Server 2012 R2"
>= 6.3.9600.0 < 6.3.9600.22221
Search vendor "Microsoft" for product "Windows Server 2012 R2" and version " >= 6.3.9600.0 < 6.3.9600.22221"
en
Affected
Microsoft
Search vendor "Microsoft"
Windows Server 2012 R2 (Server Core Installation)
Search vendor "Microsoft" for product "Windows Server 2012 R2 (Server Core Installation)"
>= 6.3.9600.0 < 6.3.9600.22221
Search vendor "Microsoft" for product "Windows Server 2012 R2 (Server Core Installation)" and version " >= 6.3.9600.0 < 6.3.9600.22221"
en
Affected