News Windows Wi-Fi Driver Remote Code Execution Vulnerability CVE-2024-30078

[DJones]

“Microsoft has confirmed a new and quite alarming Wi-Fi vulnerability in Windows, which has been rated 8.8 out of 10 in terms of severity using the Common Vulnerability Scoring System. The vulnerability, assigned as CVE-2024-30078, does not require an attacker to have physical access to the targeted computer, although physical proximity is needed.”

New Wi-Fi Takeover Attack—All Windows Users Warned To Update Now

Microsoft has released a critical security update for users of all supported Windows versions as a new Wi-Fi compromise requiring no authentication has been confirmed.

www.forbes.com

 

[Wallace_n_Gromit]

“Microsoft has confirmed a new and quite alarming Wi-Fi vulnerability in Windows, which has been rated 8.8 out of 10 in terms of severity using the Common Vulnerability Scoring System. The vulnerability, assigned as CVE-2024-30078, does not require an attacker to have physical access to the targeted computer, although physical proximity is needed.”

New Wi-Fi Takeover Attack—All Windows Users Warned To Update Now

Microsoft has released a critical security update for users of all supported Windows versions as a new Wi-Fi compromise requiring no authentication has been confirmed.

www.forbes.com

I am currently viewing a source that claims that a clever hacker has (already) provided a hack (for a $5000 price--negotiable) using already known vulnerabilities in (unpatched) enterprise and consumer-grade routers to make the claim of "...physical proximity is needed." not quite true.

This hack would make ANY (unpatched) windows device since VISTA connecting wirelessly to one of these infected wireless internet gateway device ANYWHERE in the world vulnerable.

That should rate this CVE more like a 9.8-10.0 (according to that source)

 

[Wallace_n_Gromit]

Discussion of CVE-2024-30078 begins at 15:43 into video (ends at 23:04)