CVE-2024-30062

EUVD-2024-27999
Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
microsoftCNA
7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_server_2016
𝑥
< 10.0.14393.7070
microsoftwindows_server_2019
𝑥
< 10.0.17763.5936
microsoftwindows_server_2022
𝑥
< 10.0.20348.2522
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows Server 2012 R2
Server Core
KB5039294
Standard
KB5039294
Windows Server 2016
Server Core
KB5039214
Standard
KB5039214
Windows Server 2019
Server Core
KB5039217
Standard
KB5039217
Windows Server 2022
Server Core
KB5039330
Standard
KB5039330
Common Weakness Enumeration
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30062
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30062