CVE-2025-21201

Summary

CVE-2025-21201 is a remote code execution vulnerability affecting Microsoft's Windows Telephony Server. Successful exploitation allows an attacker to execute arbitrary code on the targeted system. The vulnerability occurs due to insufficient input validation in the RASTelephony.exe component, enabling attackers to send maliciously crafted packets to trigger the code execution. This issue poses a significant risk, as an attacker can gain full control over the compromised server and potentially spread laterally within a network. It is recommended that affected systems be patched as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.