CVE-2024-21638
Microsoft Azure Ipam vulnerability
- Published10 Jan 2024
Description
Azure IPAM (IP Address Management) is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP Address space easily and effectively. By design there is no write access to customers' Azure environments as the Service Principal used is only assigned the Reader role at the root Management Group level. Until recently, the solution lacked the validation of the passed in authentication token which may result in attacker impersonating any privileged user to access data stored within the IPAM instance and subsequently from Azure, causing an elevation of privilege. This vulnerability has been patched in version 3.0.0.
CVSS 3.1 breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NAffected products
Remediation
Frequently asked
Is CVE-2024-21638 being actively exploited?
CVE-2024-21638 is not in the CISA KEV catalog. Its EPSS exploit probability is 1.66%.
How severe is CVE-2024-21638?
CVE-2024-21638 has a CVSS 3.1 base score of 9.1, rated critical. EPSS estimates a 1.66% probability of exploitation.
Which products are affected by CVE-2024-21638?
Affected products include Microsoft Azure Ipam.
How do I fix CVE-2024-21638?
Upgrade affected software to a fixed version, for example Microsoft Azure Ipam 3.0.0 or later, then confirm no affected versions remain in your inventory.
How Secuno handles this
Secuno correlates vulnerabilities like CVE-2024-21638 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.
Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.