CVE-2024-30005 is a remote code execution vulnerability in the Windows Mobile Broadband Driver, affecting various versions of Windows 10, 11, and Server. With a CVSS score of 6.8 (Medium), it presents a significant risk as an attacker could achieve full compromise (confidentiality, integrity, availability) with physical access and low attack complexity. Although no public exploit code or active exploitation has been observed, its inclusion in Microsoft's May 2024 Patch Tuesday highlights its importance. Community discussion and media coverage are minimal, suggesting limited public awareness despite its potential impact.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 10.0.17763.5820CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:* | ||
< 10.0.19044.4412CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:* | ||
< 10.0.19045.4412CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:* | ||
< 10.0.22000.2960CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:* | ||
< 10.0.22621.3593CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.