CVE-2023-35365

CriticalCVSS 9.8

Published: 11/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.65%

73th percentile - higher than 73% of all known CVEs

Summary

A vulnerability in the Windows Routing and Remote Access Service (RRAS) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.

Risk Assessment

The risk to the organization involves the potential for remote code execution, which could lead to data loss or full system control. High risk to IT infrastructure security.

Recommendation

It is recommended to update Windows to the latest version to patch this vulnerability. Additionally, monitor logs and implement extra security measures in the infrastructure.

Original NVD description (English source)

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability