CVE-2023-35365
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk73th percentile - higher than 73% of all known CVEs
Summary
A vulnerability in the Windows Routing and Remote Access Service (RRAS) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
Risk Assessment
The risk to the organization involves the potential for remote code execution, which could lead to data loss or full system control. High risk to IT infrastructure security.
Recommendation
It is recommended to update Windows to the latest version to patch this vulnerability. Additionally, monitor logs and implement extra security measures in the infrastructure.
Other vulnerabilities in Windows Routing and Remote Access Service (RRAS)
See all- CVE-2023-35367Critical
A vulnerability in the Windows Routing and Remote Access Service (RRAS) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
- CVE-2023-35366Critical
A vulnerability in the Windows Routing and Remote Access Service (RRAS) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
- CVE-2026-49791High
Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-20843High
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability