If administrators host virtual machines with Azure Stack HCI, they should install the latest version to prevent attacks.

Anzeige

Close the security gap

In a warning message, Microsoft writes that the vulnerability (CVE-2024-49060) is classified with a threat level of“high“. According to the authors, no attacks are known to date, but they could be imminent. A security update, which is deployed from Azure Stack HCI 2411offers a remedy.

If the attacks are successful, the attackers can gain more rights. How this might work in detail is not yet known. Microsoft states that attackers must already be authenticated for an attack to access a vulnerable Azure Stack HCI cluster. This could be done via SSH, for example.

(often)