Windows Wi-Fi 驱动程序远程代码执行漏洞 CVE-2024-30078

[pocketz]

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30078

Windows Server 2012 R2 (Server Core installation)

Windows Server 2012 R2

Windows Server 2012 (Server Core installation)

Windows Server 2012

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Windows Server 2008 for x64-based Systems Service Pack 2

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

Windows Server 2008 for 32-bit Systems Service Pack 2

Windows Server 2016 (Server Core installation)

Windows Server 2016

Windows 10 Version 1607 for x64-based Systems

Windows 10 Version 1607 for 32-bit Systems

Windows 10 for x64-based Systems

Windows 10 for 32-bit Systems

Windows Server 2022, 23H2 Edition (Server Core installation)

Windows 11 Version 23H2 for x64-based Systems

Windows 11 Version 23H2 for ARM64-based Systems

Windows 10 Version 22H2 for 32-bit Systems

Windows 10 Version 22H2 for ARM64-based Systems

Windows 10 Version 22H2 for x64-based Systems

Windows 11 Version 22H2 for x64-based Systems

Windows 11 Version 22H2 for ARM64-based Systems

Windows 10 Version 21H2 for x64-based Systems

Windows 10 Version 21H2 for ARM64-based Systems

Windows 10 Version 21H2 for 32-bit Systems

Windows 11 version 21H2 for ARM64-based Systems

Windows 11 version 21H2 for x64-based Systems

Windows Server 2022 (Server Core installation)

Windows Server 2022

Windows Server 2019 (Server Core installation)

Windows Server 2019

Windows 10 Version 1809 for ARM64-based Systems

Windows 10 Version 1809 for x64-based Systems

Windows 10 Version 1809 for 32-bit Systems

[BaiLinfeng]

所以能演示下效果？

[povsister]

@BaiLinfeng
这东西 POC 应该只有内部知道，不然这影响范围一个公开就是另一个永恒之蓝

[liuzimin]

借楼问一下，有没有那种专门交流 Win 每次升级后的 bug 汇总的网站？这样我每次好观察一下是否适合升级再升。

[V1Eerie]

@povsister #2 GitHub 看到的 PoC 实现 https://github.com/alperenugurlu/CVE-2024-30078-

[Kinnice]

@V1Eerie 看起来是个占坑骗 star 的

[codehz]

需要有 WiFi 接入，服务器基本上不用担心了。。。。笔记本的话，与其有闲心到你家附近的黑客，不如担心家里会不会遭贼（）

[jim9606]

已更新至 10.0.22631.3737

@liuzimin
https://aka.ms/Windows11UpdateHistory
注意 Win10 开始使用 WaaS 发布模型的系统只提供累积更新包（ LCM ），也就是新的补丁包包含之前的所有补丁更改，就像手机 APP 一样版本只有一条线。

[Wy4q3489O1z996QO]

现在家庭设备都是在路由器防火墙后面，不安装乱七八糟的软件还会受这些漏洞的影响吗？

[People11]

linux.do/t/topic/113329
这是目前为止我认为比较可靠的解释，也就是说，1. 设备无论有没有接入 WiFi ，只要打开了 WiFi ，就能被攻击。2. 可能只对免驱 WiFi 设备有效

[MrKrabs]

@romotc 局域网随便来个安德猴手机就是雷

[bluedawn]

@romotc 这个漏洞的条件：物理上靠近，意味着就算你没联网，只要开了 Wi-Fi 就会被藏在隔壁墙里面的黑客入侵。

[Wy4q3489O1z996QO]

@bluedawn 幸好我用的是 win7🐶

[mikywei]

@V1Eerie 已经 404 了。。。

[codgician]

@romotc 然而 win7 也受影响

[V1Eerie]

@Kinnice
@mikywei
https://github.com/blkph0x/CVE_2024_30078_POC_WIFI