CVE Catalog

CVE-2024-30075

HighCVSS 8.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.88%

55th percentile - higher than 55% of all known CVEs

Summary

A vulnerability in the Windows Link Layer Topology Discovery (LLTD) protocol allows remote code execution. An attacker can send a specially crafted network packet to a vulnerable system, potentially leading to full device compromise.

Risk Assessment

The risk for the organization includes remote takeover of workstations and servers on the local network, which could lead to data theft, malware propagation, or disruption of IT infrastructure.

Recommendation

Immediately apply security patches released by Microsoft for affected Windows systems. Also consider restricting LLTD protocol traffic in the network using firewalls or group policies.

Other vulnerabilities in Windows LLTD Protocol

Original NVD description (English source)

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS