Product:
Windows Routing and Remote Access Service
Summary
Improper link resolution before file access in Windows Routing and Remote Access Service allows an authorized attacker to deny service locally. This vulnerability can lead to significant service disruption. It is important for users to be aware of this issue to prevent potential denial of service attacks.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-59510 |
Exploitation
To exploit this vulnerability, an attacker with local access can manipulate link resolution processes to cause the service to become unresponsive. By crafting specific requests or inputs, the attacker can trigger the denial of service condition, impacting the availability of the service for legitimate users.
Affected Products
- Windows Routing and Remote Access Service: This service is affected by improper link resolution, allowing for local denial of service attacks.
Mitigation
To mitigate this vulnerability, it is recommended to apply any available patches from Microsoft and ensure that access to the affected service is restricted to authorized users only. Regular monitoring and auditing of service access can also help in identifying and preventing potential exploitation.