CVE-2025-62549CWE-822

CVE-2025-62549

High · published December 9, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
70.6
In the wild
Unconfirmed
What it is

⚡ An untrusted pointer dereference in Windows RRAS could let attackers pull some sneaky moves over your network! 🔥 Think of RRAS as a traffic cop directing data through the streets of your network. If the cop can’t tell which cars are authorized, they might let in just about anyone, ignoring a few stop signs along the way! This vulnerability could allow an unauthorized attacker to execute code remotely, essentially giving them the keys to your network's backdoor. Imagine the chaos if an intruder starts hijacking traffic, manipulating data or even taking control of critical systems — that's a recipe for disaster!

Put simply

Think of RRAS as a traffic cop directing data through the streets of your network. If the cop can’t tell which cars are authorized, they might let in just about anyone, ignoring a few stop signs along the way! This CVE stems from an untrusted pointer dereference in Windows' Routing and Remote Access Service, which can be exploited to execute arbitrary code on the server, leaving it vulnerable to various malicious activities.

What to do

This vulnerability could allow an unauthorized attacker to execute code remotely, essentially giving them the keys to your network's backdoor. Imagine the chaos if an intruder starts hijacking traffic, manipulating data or even taking control of critical systems — that's a recipe for disaster! To mitigate this risk, patch your Windows systems immediately to the latest version provided by Microsoft. Also, consider restricting access to RRAS services and monitoring network traffic for any suspicious activity. Your proactive measures will help fortify your defenses! You've got this! Keep your systems updated, and soon enough, you'll have this situation under control. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01318 · 70.6th percentile
Weakness
CWE-822 · Untrusted Pointer Dereference
Published
2025-12-09T23:15Z
Affected products (19)
ProductVersionsFixed in
microsoft/windows_10_1607< 10.0.14393.868810.0.14393.8688
microsoft/windows_10_1607< 10.0.14393.868810.0.14393.8688
microsoft/windows_10_1809< 10.0.17763.814610.0.17763.8146
microsoft/windows_10_1809< 10.0.17763.814610.0.17763.8146
microsoft/windows_10_21h2< 10.0.19044.669110.0.19044.6691
microsoft/windows_10_22h2< 10.0.19045.669110.0.19045.6691
microsoft/windows_11_23h2< 10.0.22631.634510.0.22631.6345
microsoft/windows_11_24h2< 10.0.26100.739210.0.26100.7392
microsoft/windows_11_25h2< 10.0.26200.739210.0.26200.7392
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2016< 10.0.14393.868810.0.14393.8688
microsoft/windows_server_2019< 10.0.17763.814610.0.17763.8146
microsoft/windows_server_2022< 10.0.20348.446710.0.20348.4467
microsoft/windows_server_2022_23h2< 10.0.25398.202510.0.25398.2025
microsoft/windows_server_2025< 10.0.26100.739210.0.26100.7392
References (3)
EPSS history
Timeline
  • 09 DEC 17:55Z
    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
    cvelistv5