3 ms·

August 2024, "Zero-click Windows TCP/IP RCE impacts all systems with IPv6 enabled", https://www.bleepingcomputer.com/news/microsoft/zero-click-windows-tcp-ip-rc

August 2024, "Zero-click Windows TCP/IP RCE impacts all systems with IPv6 enabled", https://www.bleepingcomputer.com/news/microsoft/zero-click-windows-tcp-ip-rce-impacts-all-systems-with-ipv6-enabled-patch-now/ https://www.bleepingcomputer.com/news/microsoft/zero-click-w... > the bug in TCP/IP that would allow a remote, unauthenticated attacker to get elevated code execution just by sending specially crafted IPv6 packets to an affected target .. That means it's wormable

BitPirate 2y ago
If we stopped using things that had vulnerabilities, we'd be using sticks and stones by now. Other operating systems weren't affected, so it's not inherent in the protocol itself.
- transpute 2y ago
  Windows users with IPv6-blocking routers were protected from RCE. Defense in depth is a viable approach if IPv6 features are not required.
  - abhinavk 2y ago
    Windows users with firewall-enabled routers were also protected from RCE.
fourfour3 2y ago
https://malwaretech.com/2024/08/exploiting-CVE-2024-38063.html https://malwaretech.com/2024/08/exploiting-CVE-2024-38063.ht... is very worthwhile reading as a write on up this - it's nothing inherent in IPv6 and was a bug in Windows's packet processing of reassembled packets. I'm not convinced it would be particularly exploitable with a firewall between the system and the rest of the internet blocking unsolicited incoming traffic -which is what most consumer routers etc are doing for IPv6.
throw0101b 2y ago
Better disable IPv4 then, as there were zero-click vulnerabilities in Windows in that as well, e.g., CVE-2021-24074.