Posts

Author: 0xKrat0s

_posts/2024-08-28-CVE-2024-38063.md

@@ -14,7 +14,7 @@ Discovered by [XiaoWei](https://x.com/XiaoWei___) from Kunlun Lab, the flaw is c
 ## Vulnerability Details
 
 ```
-  - Severity: Critical (CVSS score: 9.8)
+  -  Severity: Critical (CVSS score: 9.8)
   -  Impact: Remote code execution
   -  Exploitability: High, with potential for rapid weaponization
   -  Affected Systems: All Windows systems with IPv6 enabled
@@ -32,22 +32,17 @@ While Microsoft has released a patch to address this vulnerability, organization
 
 One way is to manipulate the Windows Registry. Running this PowerShell command will show us our current IPv6 settings:
 
-```PowerShell
+```ts:PowerShell
 Get-ItemProperty -Path HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\
 ```
 
 This command displays the existing IPv6 configuration, including whether it's enabled or disabled.
 
-![Github Traffic](/images/CVE-2024-38063/IPV6-1.png)*IPV6 Configuration*
-
 ```ts:PowerShell
 Set-ItemProperty -Path HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters -Name "DisabledComponents" -Value 0xFF -Type DWord
 ```
 
 This command sets the DisabledComponents value to 255, effectively disabling IPv6.
-
-![Github Traffic](/images/CVE-2024-38063/IPV6-2.png)*Disable IPV6*
-
 Alternatively, we can disable IPv6 protocol binding for all network adapters on the system, as X(Former Twitter) user [biffbiffbiff](https://x.com/biffbiffbiff/status/1823676176562290734) points out.
 
 ## Should You Disable IPv6?
@@ -64,16 +59,12 @@ If you have disabled IPv6 and now wish to re-enable it, you can do so with the f
 Set-ItemProperty -Path HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters -Name "DisabledComponents" -Value 0x00 -Type DWord
 ```
 
-![Github Traffic](/images/CVE-2024-38063/IPV6-3.png)*Restore the DisabledComponents registry value*
-
 To re-enable IPv6 on our Network Adapters, we will run the PowerShell command:
 
 ```PowerShell
 Get-NetAdapter | ForEach { Enable-NetAdapterBinding -InterfaceAlias $_.Name -ComponentID ms_tcpip6 }
 ```
 
-![Github Traffic](/images/CVE-2024-38063/IPV6-4.png)*Enable IPV6*
-
 ## Recommendations
 
 - Apply the Patch: Prioritize the installation of the official patch released by Microsoft as soon as possible.