Product:
Windows Routing and Remote Access Service
Summary
Out-of-bounds read in Windows Routing and Remote Access Service allows an unauthorized attacker to disclose information over a network. This vulnerability can lead to significant confidentiality issues as sensitive information may be exposed. Attackers can exploit this flaw without needing elevated privileges, making it a serious concern for network security.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-58717 |
Exploitation
To exploit this vulnerability, an attacker must send specially crafted packets to the Windows Routing and Remote Access Service. If successful, the attacker can trigger an out-of-bounds read condition, allowing them to access sensitive information that should not be disclosed. This requires the attacker to have network access and may involve some level of user interaction.
Affected Products
- Windows Routing and Remote Access Service: A service that allows remote access to a network, which is vulnerable to information disclosure due to an out-of-bounds read.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, network administrators should implement strict access controls and monitor network traffic for any suspicious activity that may indicate an attempt to exploit this vulnerability.