CVE-2024-43453

Summary

CVE-2024-43453 is a newly disclosed remote code execution vulnerability affecting Windows Routing and Remote Access Service (RRAS). Successful exploitation of this weakness allows an unauthenticated attacker to execute arbitrary code on the targeted system. The vulnerability arises due to insufficient input validation in the RRAS component, enabling remote attackers to send specially crafted packets to execute malicious code. This issue poses a serious threat, as RRAS is a critical component for remote access and routing functionalities in Windows networks. Organizations are urged to apply the forthcoming Microsoft security patch as soon as it becomes available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.