PT-2024-4139 · Microsoft · Windows

Wei · Published 2024-06-11 · Updated 2025-12-19 · CVE-2024-30078

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)

Description The vulnerability allows remote attackers to execute arbitrary code and affect the system. It is related to errors in processing input data in the Windows Wi-Fi driver. An unauthenticated attacker could send a malicious networking packet to an adjacent system that is employing a Wi-Fi networking adapter, which could enable remote code execution. The attacker does not need prior access to the target computer, only needing to be within Wi-Fi range to send a crafted packet. The vulnerability has a significant scope and potential harm, with billions of drivers potentially affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2024-04609

CVE-2024-30078

Affected Products

Windows

References · 69

• 🔥 https://github.com/lvyitian/CVE-2024-30078- · Exploit
• 🔥 https://github.com/52by/CVE-2024-30078 · Exploit
• 🔥❌ https://github.com/nkontopoul/checkwifivulnerability · Exploit, Deleted
• 🔥❌ https://github.com/alperenugurlu/CVE-2024-30078- · Exploit, Deleted
• https://bdu.fstec.ru/vul/2024-04609 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-30078 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30078 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-30078 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-30078 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30078 · Security Note
• https://twitter.com/f4rmpoet/status/1826659390021402962 · Twitter Post
• https://twitter.com/graceinhim/status/1803931253273694699 · Twitter Post
• https://twitter.com/Ahmed___khaan/status/1804586643686347221 · Twitter Post
• https://t.me/CyberSecurityTechnologies/10693 · Note
• https://twitter.com/Um1Nek0_hex/status/1803853269015691725 · Twitter Post