Product:
Azure Application Gateway
Summary
Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network. This vulnerability poses a significant risk as it can lead to unauthorized access and control over the affected system. Attackers can exploit this flaw to compromise the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2025-64657 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted network packets to the Azure Application Gateway. By triggering the stack-based buffer overflow, the attacker can execute arbitrary code, leading to privilege escalation. This can be done without any user interaction and requires no prior authentication, making it particularly dangerous.
Affected Products
- Azure Application Gateway: A web traffic load balancer that enables you to manage traffic to your web applications.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, monitoring network traffic for unusual patterns and implementing strict access controls can help reduce the risk of exploitation. Regularly reviewing and updating security configurations is also advisable.