CVE-2024-30074
HighCVSS 8.0Exploitation Probability (EPSS)
Elevated risk64th percentile - higher than 64% of all known CVEs
Summary
A vulnerability in the Windows Link Layer Topology Discovery (LLTD) protocol allows remote code execution. An attacker can send a specially crafted packet to a vulnerable system, leading to full control over the device.
Risk Assessment
The risk for the organization includes the possibility of remote takeover of Windows workstations and servers, which can lead to data theft, malware installation, or further propagation of the attack within the network.
Recommendation
It is recommended to immediately apply security patches released by Microsoft as part of security updates. Additionally, consider disabling the LLTD protocol in environments where it is not required.
Other vulnerabilities in Windows LLTD Protocol
Original NVD description (English source)
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

