Product:
Windows Routing and Remote Access Service
Summary
Out-of-bounds read in Windows Routing and Remote Access Service allows an unauthorized attacker to disclose information over a network. This vulnerability can lead to significant confidentiality impacts, making sensitive information accessible to attackers. It is crucial for users to be aware of this issue to protect their networks.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-54095 |
Exploitation
To exploit this vulnerability, an attacker must have network access and can trigger the out-of-bounds read by sending specially crafted packets to the affected service. This requires user interaction, as the attacker needs to convince a user to connect to a malicious network or service. Once successful, the attacker can gain access to sensitive information that should not be disclosed.
Affected Products
- Windows Routing and Remote Access Service: This service is vulnerable to an out-of-bounds read, allowing unauthorized information disclosure.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. Additionally, implementing network segmentation and monitoring can help reduce the risk of exploitation. Users should also be cautious about connecting to unknown networks.