CVE-2024-30062
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
This vulnerability allows remote code execution in the Windows Standards-Based Storage Management Service. An unauthenticated attacker can exploit this flaw to take control of the system.
Risk Assessment
The risk involves remote takeover of a Windows server by an unauthenticated attacker, potentially leading to data theft, malware installation, or service disruption.
Recommendation
Apply the security updates published by Microsoft in the monthly patch rollup immediately. Restrict access to the storage management service to trusted networks only.
Other vulnerabilities in Windows Standards-Based Storage Management Service
See all- CVE-2024-38230Medium
Denial of service vulnerability in Windows Standards-Based Storage Management Service. Could allow disruption of storage management services.
- CVE-2024-30083High
A vulnerability in the Windows Standards-Based Storage Management Service allows a Denial of Service (DoS) attack. An attacker can exploit this flaw to disrupt the service, leading to denial of access to storage management.
Original NVD description (English source)
Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability