Product:
Windows Routing and Remote Access Service
Summary
Buffer over-read in Windows Routing and Remote Access Service allows an unauthorized attacker to disclose information over a network. This vulnerability can lead to significant confidentiality impacts, making sensitive information accessible to attackers. It is crucial for users to be aware of this issue to protect their networks.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-62473 |
Exploitation
To exploit this vulnerability, an attacker must be on the same network as the target system. By sending specially crafted packets to the Windows Routing and Remote Access Service, the attacker can trigger the buffer over-read condition, allowing them to access sensitive information that should not be disclosed. User interaction is required for the attack to be successful.
Affected Products
- Windows Routing and Remote Access Service: A service that allows remote access to a network, which is vulnerable to information disclosure due to buffer over-read.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should also implement network segmentation and monitor network traffic for any suspicious activity. Regularly reviewing and updating security policies can help reduce the risk of exploitation.