CVE-2024-30002: 
vulnerability analysis and mitigation

Windows Mobile Broadband Driver Remote Code Execution Vulnerability (CVE-2024-30002) was disclosed on May 14, 2024, affecting various versions of Microsoft Windows operating systems including Windows 10, Windows 11, and Windows Server editions. The vulnerability was identified and reported by Microsoft Corporation (MSRC, NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 6.8 (Medium) with the vector string CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. It is classified under CWE-20 (Improper Input Validation) according to Microsoft's assessment. The vulnerability affects the Windows Mobile Broadband Driver component and could potentially lead to remote code execution (NVD).

If successfully exploited, this vulnerability could allow an attacker to achieve remote code execution with high impacts on confidentiality, integrity, and availability of the affected systems. The CVSS scoring indicates potential for complete compromise of system confidentiality, integrity, and availability if exploited (MSRC).

The vulnerability requires physical access (AV:P) with low attack complexity (AC:L) and no privileges (PR:N) or user interaction (UI:N) to exploit, as indicated by the CVSS vector string (NVD).

Microsoft has released security updates to address this vulnerability across affected versions. Updates are available for Windows 10 (1809, 21H2, 22H2), Windows 11 (21H2, 22H2, 23H2), and Windows Server (2019, 2022) versions. Users should apply the appropriate KB updates: KB5037765, KB5037768, KB5037770, KB5037771, KB5037781, or KB5037782 depending on their system version (Rapid7).