High8.0Microsoft Server

High [CVE-2024-30075] Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

This high-severity Microsoft Server advisory covers CVE-2024-30075 affecting Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2008 Service Pack 2 (Server Core installation).

CVE-2024-30075 Published Jun 11, 2024Updated by vendor Jul 20, 2026

CVE-2024-30075

Affected products & platforms

Microsoft ServerWindows Server

Open vendor advisory

Android app · Google Play

Monitor future Microsoft Server CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2008 R2 Service Pack 1; Windows Server 2008 R2 Service Pack 1 (Server Core installation); Windows Server 2008 Service Pack 2; Windows Server 2008 Service Pack 2 (Server Core installation).

Affected versions

Windows Server 2008 R2 Service Pack 1 6.1.7601.0 before 6.1.7601.27170
Windows Server 2008 R2 Service Pack 1 (Server Core installation) 6.1.7601.0 before 6.1.7601.27170
Windows Server 2008 Service Pack 2 6.0.6003.0 before 6.0.6003.22720
Windows Server 2008 Service Pack 2 (Server Core installation) 6.0.6003.0 before 6.0.6003.22720

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Fixed versions

6.1.7601.27170
6.0.6003.22720

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Mitigation

Upgrade to a fixed release: 6.1.7601.27170, 6.0.6003.22720. That is the remediation for this advisory.

The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Sources

Official and corroborating records used to build this advisory.

Official vendor advisoryofficial
Official advisory page fetched and parsed for the summary, affected/fixed versions and remediation guidance it provides.
Microsoft Server
CVE.org CNA recordCVE.org
Independent CNA record used for near-real-time discovery and missed-CVE reconciliation. Discovered from the machine-readable feed https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/delta.json; this link opens the CVE.org record for CVE-2024-30075 instead of the raw feed document.
CVE Program

Cross-references

Validate CVE metadata against the authoritative registries.

CVE-2024-30075NVD CVE.org MITRE

Official resources

MSRC Security Update Guide
Official documentation
Filter by this CVE for per-product KB numbers, severity and exploitability assessment.

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.