What is CVE-2024-1243?

CVE-2024-1243 is a high-severity vulnerability in Wazuh, classified under Improper Input Validation. CVSS score: 7.2/10. Published 2025-06-11.

How severe is CVE-2024-1243?

High severity. CVSS v3 base score is 7.2 out of 10.

Improper input validation in Wazuh

CVE-2024-1243

Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of th…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.005 (41.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Wazuh
Wazuh Agent — versions < 4.8.0

Weakness classification (CWE)

References

41c37e40-543d-43a2-b660-2fee83ea851a (Product)
41c37e40-543d-43a2-b660-2fee83ea851a (Exploit, Vendor Advisory)
41c37e40-543d-43a2-b660-2fee83ea851a (Exploit, Vendor Advisory)

Frequently asked questions

What is CVE-2024-1243?: CVE-2024-1243 is a high-severity vulnerability in Wazuh, classified under Improper Input Validation. CVSS score: 7.2/10. Published 2025-06-11.
How severe is CVE-2024-1243?: High severity. CVSS v3 base score is 7.2 out of 10.