A recently discovered security flaw in Windows allows hackers to infect vulnerable computers through a Wi-Fi network, as reported by Forbes. Identified as CVE-2024-30078, this flaw affects all versions of Windows and has received a CVSS score of 8.8 out of 10, reflecting its high danger. The severity of the situation lies in the fact that the attacker does not need physical access to the system, only to be on the same Wi-Fi network as the victim.
Microsoft has confirmed that no special requirements need to be met to become a victim of this vulnerability, except for the hacker being near a target and on the same Wi-Fi network. Additionally, no authentication or access to the victim’s PC settings or files is required. These circumstances make the vulnerability a serious risk, as users do not need to take any action, such as clicking on a link or downloading a file, for their devices to be infected.
While the risk is lower for users who use desktop computers, those who use their laptops in public places such as cafes or airports are more exposed. Public Wi-Fi networks, although they can be useful in some cases, already present inherent dangers without considering this new flaw. Therefore, it is recommended to use a VPN when connecting to public networks and avoid accessing sensitive information from a laptop in these environments.
Microsoft has indicated that the exploitation of this vulnerability is “unlikely”, but the public disclosure of the flaw could encourage hackers to develop a specific exploit. The company has already patched this vulnerability along with 48 others in its June 2024 updates.
As it is obvious, it is strongly recommended that users update their computers as soon as possible. In addition, it is recommended to have Windows Defender activated at all times, Microsoft’s free antivirus, as it offers great protection against all kinds of threats. Keeping your PC updated and protected is essential to avoid attacks derived from vulnerabilities like this.
