Microsoft Outlook Zero-Click RCE Flaw (CVE-2024-30103)

AI Generated Image - CVE-2024-30103

Introduction

In June 2024, the CVE-2024-30103 vulnerability was discovered in Microsoft Outlook, highlighting a critical security issue that requires immediate attention.

What is CVE-2024-30103?

CVE-2024-30103 is a severe zero-click remote code execution (RCE) vulnerability in Microsoft Outlook. Unlike traditional phishing attacks, this flaw allows attackers to execute arbitrary code simply by sending a malicious email. Users do not need to click on any links or open attachments, making this vulnerability particularly dangerous.

How the Attack Works

The attack exploits the way Outlook processes certain email content. By crafting a malicious email, attackers can bypass security measures and execute code automatically upon email receipt. This could lead to unauthorized access, data theft, or full system compromise without any user interaction.

Why It’s Dangerous

The zero-click nature of this flaw means that even vigilant users who avoid suspicious links and attachments are at risk. The potential for widespread damage and the ease of exploitation make this vulnerability highly critical.

For clients of 256 Solutions Managed Services in Hamilton, Burlington, Oakville, Niagara and beyond, please be advised that we have already begun the mitigation for this security flaw.

Mitigation Steps Performed by 256 Solutions

• Patch Updates: 256 Solutions’ RMM platform immediately began pushing the updated Outlook version upon release.

  • The updated version as of this writing is: version 2405 , Build 17628.20144

• Reboot Prompt: If prompted to reboot or restart Outlook, do so immediately.

• Email Filtering: Users of 256 Solutions Managed Services benefit from best-in-class email filtering supplied by Checkpoint, which is likely able to detect and block these malicious emails from coming in.

256 Solutions RMM Platform showing a device requiring an update

The output from the logs showing the update being downloaded on the specified machine showing the update is underway

Mitigation Steps for Non-256 Solutions Users

• Windows Updates: Ensure Windows Updates are running and up-to-date.

• Security Software: Ensure your security software is running and up-to-date.

• Managed Solutions: Consider using a managed solution from a reputable company like 256 Solutions. If your IT provider has not already performed these updates perhaps we should have a chat.

• Outlook Version: Make sure you are running the Outlook version that includes the fix for CVE-2024-30103.