Vulnerability · Published Jan 21, 2025 · Assigned by elastic
CVE-2024-37284Elastic Defend Improper Handling of Alternate Encoding Leads to Crash
Medium 5.5
In plain English
A medium-severity security flaw in Elastic Defend from Elastic. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 95.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper handling of alternate encoding occurs when Elastic Defend on Windows systems attempts to scan a file or process encoded as a multibyte character. This leads to an uncaught exception causing Elastic Defend to crash which in turn will prevent it from quarantining the file and/or killing the process.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Elastic | Elastic Defend | 8.0.0 – before 8.13.3 |
Weakness: CWE-755 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H