CVE-2024-43608

Summary

CVE-2024-43608 is a new remote code execution vulnerability affecting the Windows Routing and Remote Access Service (RRAS). Hackers can exploit this weakness to execute arbitrary code on vulnerable systems, potentially leading to significant security breaches. The issue stems from a flaw in the way RRAS handles certain RRAS-specific RPC calls. Microsoft has not yet released a patch for this vulnerability, leaving affected Windows systems at risk until a fix is available. Until then, administrators are advised to take extra precautions, such as implementing firewalls and access control lists, to protect their networks from potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.