CVE Catalog

CVE-2024-30074

HighCVSS 8.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.18%

64th percentile - higher than 64% of all known CVEs

Summary

A vulnerability in the Windows Link Layer Topology Discovery (LLTD) protocol allows remote code execution. An attacker can send a specially crafted packet to a vulnerable system, leading to full control over the device.

Risk Assessment

The risk for the organization includes the possibility of remote takeover of Windows workstations and servers, which can lead to data theft, malware installation, or further propagation of the attack within the network.

Recommendation

It is recommended to immediately apply security patches released by Microsoft as part of security updates. Additionally, consider disabling the LLTD protocol in environments where it is not required.

Other vulnerabilities in Windows LLTD Protocol

Original NVD description (English source)

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS