Product:
Windows Routing and Remote Access Service
Summary
Buffer over-read in Windows Routing and Remote Access Service allows an unauthorized attacker to disclose information over a network. This vulnerability can lead to significant confidentiality impacts, making sensitive information accessible to attackers. It is crucial for users to be aware of this issue to protect their systems from potential exploitation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-53798 |
Exploitation
To exploit this vulnerability, an attacker must have network access and can leverage the buffer over-read to gain unauthorized access to sensitive information. The attack requires user interaction, which means the victim must perform an action that triggers the vulnerability. Once the conditions are met, the attacker can extract confidential data from the affected system.
Affected Products
- Windows Routing and Remote Access Service: This service is vulnerable to buffer over-read, allowing unauthorized information disclosure.
Mitigation
To mitigate this vulnerability, users should apply the latest security updates provided by Microsoft. It is also recommended to limit network access to the Routing and Remote Access Service and to educate users about the risks of interacting with untrusted networks or services.