Microsoft Windows RRAS Remote Code Execution Vulnerability
CVE-2024-43549

8.8HIGH

What is CVE-2024-43549?

A remote code execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS), which could allow an attacker to run arbitrary code on the affected system. By sending specially crafted requests to the RRAS service, an unauthenticated attacker can exploit this vulnerability, potentially gaining control over the affected system. This could lead to unauthorized access to sensitive data or further exploitation of the network environment. Organizations using affected versions should prioritize applying necessary security updates to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Windows Server 2008 Service Pack 2 x64-based Systems 6.0.6003.0 < 6.0.6003.22918

Windows Server 2008 R2 Service Pack 1 (Server Core installation) x64-based Systems 6.1.7601.0 < 6.1.7601.27366

Windows Server 2008 R2 Service Pack 1 x64-based Systems 6.1.7601.0 < 6.1.7601.27366

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.