CVE-2024-30004: 
vulnerability analysis and mitigation

Windows Mobile Broadband Driver Remote Code Execution Vulnerability (CVE-2024-30004) was disclosed on May 14, 2024, as part of Microsoft's May Patch Tuesday security updates. This vulnerability affects various versions of Windows operating systems including Windows 10, Windows 11, and Windows Server editions (NVD, Talos).

The vulnerability has been assigned a CVSS v3.1 base score of 6.8 (Medium) with the following vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. It is classified under CWE-190 (Integer Overflow or Wraparound) (NVD).

If successfully exploited, this vulnerability could lead to remote code execution in affected systems. The vulnerability affects multiple versions of Windows operating systems, including Windows 10 (versions 1809, 21H2, 22H2), Windows 11 (versions 21H2, 22H2, 23H2), and Windows Server (2019, 2022) (NVD).

The exploitation of this vulnerability requires physical access to the target system. An attacker would need to physically connect a compromised USB device to the victim's machine to successfully exploit this vulnerability (Talos).

Microsoft has released security updates to address this vulnerability. Users are advised to apply the latest security patches available through the Microsoft Update Guide (Microsoft).