CVE Catalog
CVE-2024-30078
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk5.16%
92th percentile - higher than 92% of all known CVEs
Summary
A vulnerability in the Windows Wi-Fi driver allows remote code execution. An attacker can exploit this flaw by sending specially crafted network packets to a device with Wi-Fi enabled.
Risk Assessment
The risk involves potential takeover of the system without physical access, which could lead to data theft, malware installation, or further propagation of the attack within the network.
Recommendation
It is recommended to immediately apply the security update released by Microsoft for Windows. Consider temporarily disabling Wi-Fi on devices that cannot be patched.
Original NVD description (English source)
Windows Wi-Fi Driver Remote Code Execution Vulnerability