CVE-2024-26197: 
vulnerability analysis and mitigation

CVE-2024-26197 is a Windows Standards-Based Storage Management Service Denial of Service Vulnerability that affects multiple versions of Microsoft Windows Server. The vulnerability was initially disclosed on March 12, 2024, and affects Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, and Windows Server 2022 (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 6.5 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The vulnerability is related to improper input validation (CWE-20) as identified by Microsoft Corporation (NVD).

This vulnerability can result in a denial of service condition affecting the Windows Standards-Based Storage Management Service. The impact is primarily focused on system availability, with no direct impact on confidentiality or integrity (Rapid7).

The vulnerability requires network access and low privilege level for exploitation, with no user interaction needed as indicated by the CVSS vector string. No known exploits in the wild have been reported at this time (NVD).

Microsoft has released security updates to address this vulnerability. The following patches are available: KB5035885 for Windows Server 2012 R2, KB5035855 for Windows Server 2016, KB5035849 for Windows Server 2019, and KB5035857 for Windows Server 2022 (Rapid7).