Information Disclosure Vulnerability in Windows Routing and Remote Access Service by Microsoft
CVE-2025-50157
5.7MEDIUM
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 12 August 2025
What is CVE-2025-50157?
The Windows Routing and Remote Access Service (RRAS) contains a vulnerability due to the use of uninitialized resources. This flaw can potentially allow an authorized attacker to access sensitive information over a network, posing significant risks to system integrity and confidentiality. It is crucial for organizations using RRAS to assess their exposure and implement necessary security measures to mitigate potential data breaches.
Affected Version(s)
Windows Server 2008 Service Pack 2 x64-based Systems 6.0.6003.0 < 6.0.6003.23471
Windows Server 2008 R2 Service Pack 1 (Server Core installation) x64-based Systems 6.1.7601.0 < 6.1.7601.27872
Windows Server 2008 R2 Service Pack 1 x64-based Systems 6.1.7601.0 < 6.1.7601.27872