Product:
Application Gateway
Summary
Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network. This vulnerability poses a significant risk as it can lead to unauthorized access and control over affected systems. Attackers can exploit this flaw to gain elevated privileges without needing any user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.4 | CVE-2025-64656 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted network packets to the Application Gateway. By manipulating the data sent, the attacker can trigger the out-of-bounds read condition, allowing them to access sensitive information or execute unauthorized commands. This can be done remotely without requiring any privileges or user interaction.
Affected Products
- Application Gateway: A web traffic load balancer that enables you to manage traffic to your web applications.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, monitoring network traffic for unusual patterns and implementing strict access controls can help reduce the risk of exploitation. Regular security assessments and vulnerability scans should also be conducted to identify and address potential weaknesses.