CVE-2023-35367

CriticalCVSS 9.8

Published: 11/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.57%

72th percentile - higher than 72% of all known CVEs

Summary

A vulnerability in the Windows Routing and Remote Access Service (RRAS) allows for remote code execution. An attacker can exploit this flaw to gain control over the system.

Risk Assessment

Organizations may be exposed to remote attacks that could lead to data loss or full system control. There is a high risk to network infrastructure.

Recommendation

It is recommended to update Windows to the latest version to patch this vulnerability. Additionally, monitor logs and implement extra network security measures.

Original NVD description (English source)

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability