CVE-2025-21410

Summary

CVE-2025-21410 is a remote code execution vulnerability affecting the Windows Routing and Remote Access Service (RRAS). An attacker can exploit this vulnerability by sending specially crafted RRAS packets to a targeted system. Successful exploitation allows the attacker to execute arbitrary code with system privileges, potentially leading to a compromise of the affected system. This vulnerability poses a significant threat to organizations that use RRAS and have not applied the available patch. It is recommended to update affected systems as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.