CVE-2024-30094
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
A vulnerability in Windows Routing and Remote Access Service (RRAS) allows remote code execution. An unauthenticated attacker could exploit this flaw to take control of the affected system.
Risk Assessment
The risk involves potential remote takeover of the RRAS server, leading to data theft, malware installation, or lateral movement within the organization's network.
Recommendation
Apply the security update provided by Microsoft in the latest monthly cumulative update immediately. Additionally, restrict access to the RRAS service to trusted networks only.
Other vulnerabilities in Windows RRAS
See all- CVE-2026-62819High
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
- CVE-2026-50451High
In Windows Routing and Remote Access Service (RRAS), missing authentication for a critical function allows an authorized attacker to elevate privileges locally.
- CVE-2024-30095High
Remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS). Allows an unauthenticated attacker to execute arbitrary code remotely in the context of the RRAS service.
Original NVD description (English source)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability