Summary
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
The attacker must be authenticated to be able to exploit this vulnerability.
How would an attacker exploit this vulnerability?
An attacker who successfully exploited this vulnerability could send malformed packets to Hyper-V Replica endpoints on the host from a remote machine.
Security updates
10.0.17763.5820 — https://support.microsoft.com/help/5037765
10.0.20348.2461 — https://support.microsoft.com/help/5037782
10.0.20348.2458 — https://support.microsoft.com/help/5037848
10.0.22000.2960 — https://support.microsoft.com/help/5037770
10.0.19044.4412 — https://support.microsoft.com/help/5037768
10.0.22621.3593 — https://support.microsoft.com/help/5037771
10.0.25398.887 — https://support.microsoft.com/help/5037781
10.0.10240.20651 — https://support.microsoft.com/help/5037788
10.0.14393.6981 — https://support.microsoft.com/help/5037763
Vulnerabilities 1
-
High 8.8
Windows Hyper-V Remote Code Execution Vulnerability
Windows Hyper-V Remote Code Execution Vulnerability
Revision history
-
#2
Updated FAQ information. This is an informational change only.
-
#1
Information published.
References
-
CVE-2024-30017 Windows Hyper-V Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30017
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss