CVE-2024-43589

Summary

CVE-2024-43589 is a newly disclosed vulnerability affecting the Windows Routing and Remote Access Service (RRAS). This issue permits an unauthenticated attacker to execute arbitrary code on the targeted system remotely. The vulnerability exists due to insufficient input validation in RRAS, allowing attackers to send maliciously crafted packets to exploit the flaw. Successful exploitation could lead to a complete compromise of the affected system, potentially granting the attacker full control. Organizations are strongly urged to apply the forthcoming Microsoft patch as soon as it becomes available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.