CVE-2024-30002 in Windows
Summary
by MITRE • 05/14/2024
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 06/20/2026
This vulnerability resides within the Windows Mobile Broadband Driver component which serves as the foundational interface for mobile network connectivity on Windows operating systems. The flaw manifests as a remote code execution vulnerability that allows attackers to execute arbitrary code on affected systems with the privileges of the target user. The vulnerability stems from improper input validation within the driver's handling of mobile broadband connection parameters and network configuration data. Attackers can exploit this weakness by crafting malicious network connection requests or by manipulating existing broadband connection configurations. The technical implementation involves memory corruption issues that occur when the driver processes malformed data structures during connection establishment or configuration updates. This vulnerability directly maps to CWE-121, which describes stack-based buffer overflow conditions, and CWE-787, which covers out-of-bounds write errors. The attack surface extends across all Windows versions that support mobile broadband connectivity including windows 7 through windows 10 and windows server editions that include mobile broadband driver support. The operational impact is severe as successful exploitation can lead to complete system compromise, allowing attackers to install malware, establish persistent backdoors, or escalate privileges to system level access. The vulnerability is particularly dangerous in enterprise environments where mobile broadband connections are commonly used for remote access and field operations. According to ATT&CK framework, this vulnerability aligns with T1059.007 for command and scripting interpreter and T1068 for exploit for privilege escalation. The attack typically begins with initial access through network-based exploitation followed by privilege escalation to system level execution. Organizations should implement immediate mitigations including disabling mobile broadband drivers on systems where they are not required, applying security patches from microsoft, and monitoring for suspicious network connection patterns. Network segmentation and firewall rules should be configured to restrict mobile broadband connection attempts from untrusted networks. The vulnerability demonstrates the critical importance of driver security in operating system architectures and highlights the risks associated with legacy mobile broadband support in modern enterprise environments. Microsoft has addressed this vulnerability through security updates that include enhanced input validation and memory management controls within the mobile broadband driver component.