CVE-2024-30075
HighCVSS 8.0Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
A vulnerability in the Windows Link Layer Topology Discovery (LLTD) protocol allows remote code execution. An attacker can send a specially crafted network packet to a vulnerable system, potentially leading to full device compromise.
Risk Assessment
The risk for the organization includes remote takeover of workstations and servers on the local network, which could lead to data theft, malware propagation, or disruption of IT infrastructure.
Recommendation
Immediately apply security patches released by Microsoft for affected Windows systems. Also consider restricting LLTD protocol traffic in the network using firewalls or group policies.
Other vulnerabilities in Windows LLTD Protocol
Original NVD description (English source)
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

