CISA Warns of Microsoft Configuration Manager SQL Injection Vulnerability Exploited in Attacks

CISA warns of a critical SQL injection vulnerability (CVE-2024-43468) in Microsoft Configuration Manager (SCCM) that allows unauthenticated attackers to execute arbitrary SQL queries and potentially OS commands; active exploitation has been reported, the issue was added to CISA’s KEV catalog, and Microsoft published patches (upgrade to 2311 or apply KB5044285 or newer). The advisory urges immediate patching, scanning for suspicious SQL activity, firewall/IIS mitigations, and broader hardening for affected environments.