CVE-2024-38265

Summary

CVE-2024-38265 is a newly disclosed vulnerability affecting the Windows Routing and Remote Access Service (RRAS). This issue permits an unauthenticated attacker to execute arbitrary code on the targeted system through a specially crafted RRAS packet. Successful exploitation could lead to a complete compromise of the affected machine, resulting in potential data theft or further malicious activities. The vulnerability is currently under active exploitation in the wild, making it a critical security concern for organizations running unpatched Windows RRAS servers. Microsoft has released a patch to address the issue; it is strongly recommended to apply it as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.