CVE-2025-24051
Published: 11 March 2025
Description
Adversaries may exploit remote services to gain unauthorized access to internal systems once inside of a network.
Security Summary
CVE-2025-24051 is a heap-based buffer overflow vulnerability (CWE-122) in the Windows Routing and Remote Access Service (RRAS). Published on March 11, 2025, it has a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating high severity due to its potential for remote code execution.
An unauthorized attacker can exploit this vulnerability over a network with low complexity and no required privileges, though it necessitates user interaction. Successful exploitation allows the attacker to achieve high-impact confidentiality, integrity, and availability violations, including arbitrary code execution on the target system.
Microsoft's update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24051 provides details on mitigation and available patches for addressing this issue in affected Windows systems.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
The CVE describes a remote code execution vulnerability in the Windows RRAS service exploitable over the network with no privileges required, directly enabling T1210 Exploitation of Remote Services.