Windows Wi-Fi Driver Remote Code Execution Vulnerability (CVE-2024-30078)

Microsoft recently released a Security Advisory disclosing a new Wi-Fi Driver Remote Code Execution vulnerability (CVE-2024-30078) which is impacting many Windows products.  The vulnerability enables an unauthenticated attacker to gain remote code execution on the impacted device.  Departments or users are urged to update their Windows systems as soon as possible.

Vulnerability

• Windows Wi-Fi Driver Remote Code Execution Vulnerability (CVE-2024-30078)

Severity Level

• High

Affected Products

• Windows Servers:
  • Windows Server 2022,
  • Windows Server 2022, 23H2 Edition (Server Core installation),
  • Windows Server 2019,
  • Windows Server 2019 (Server Core installation),
  • Windows Server 2016,
  • Windows Server 2016 (Server Core installation),
  • Windows Server 2012,
  • Windows Server 2012 (Server Core installation),
  • Windows Server 2012 R2,
  • Windows Server 2012 R2 (Server Core installation)
• Windows Clients:
  • Windows 11 version 21H2,
  • Windows 11 version 22H2,
  • Windows 11 version 22H3,
  • Windows 11 Version 23H2,
  • Windows 10 Version 1809,
  • Windows 10 Version 21H2,
  • Windows 10 Version 22H2,
  • Windows 10 Version 1507,
  • Windows 10 Version 1607

Remediation

• Update affected Windows systems with Microsoft’s latest patch ASAP.

Reference

• CVE-2024-30078 – Security Update Guide – Microsoft – Windows Wi-Fi Driver Remote Code Execution Vulnerability
• NVD – CVE-2024-30078 (nist.gov)
• CVE-2024-30078 | Tenable®

Enquiry

• ITSC Service Desk: http://servicedesk.itsc.cuhk.edu.hk

Published on: 20 Jun 2024