CVE Catalog

CVE-2024-30080

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
43.15%

99th percentile - higher than 99% of all known CVEs

Summary

A remote code execution vulnerability in Microsoft Message Queuing (MSMQ) allows an attacker to execute arbitrary code remotely in the system context. The flaw exists in the message queuing mechanism and can be exploited without authentication.

Risk Assessment

An attacker can take control of the vulnerable system, leading to full compromise of confidentiality, integrity, and availability of data and services.

Recommendation

Apply the security update provided by Microsoft in the monthly cumulative patch immediately. Restrict access to the MSMQ service to trusted networks only.

Original NVD description (English source)

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS