Product:
High Performance Compute Pack
Summary
Deserialization of untrusted data in Microsoft High Performance Compute Pack allows an unauthorized attacker to execute code over a network. This vulnerability poses a significant risk due to its high impact on confidentiality, integrity, and availability. Attackers can exploit this flaw without requiring any privileges or user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2025-55232 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted data over the network to the affected Microsoft High Performance Compute Pack. The deserialization of this untrusted data can lead to arbitrary code execution, allowing the attacker to take control of the system. Given the low complexity of the attack and the lack of required privileges, this vulnerability is particularly dangerous.
Affected Products
- Microsoft High Performance Compute Pack: Affected by deserialization issues that allow unauthorized code execution.
Mitigation
To mitigate this vulnerability, users should apply the latest security updates provided by Microsoft. It is also recommended to review and restrict network access to the High Performance Compute Pack to minimize exposure. Regular security assessments and monitoring can help detect any unauthorized access attempts.