CVE-2017-8461

Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution Vulnerability."

Affected

Microsoft Corporation · Microsoft Windows

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

20.41% chance of exploitation in the next 30 days, 97th percentile

Published

2017-06-15

Updated

2024-08-05

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/161672/Microsoft-Windows-RRAS-Service-MIBEntryGet-Ov…

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/smb_rras_erraticgoph…

Security advisories

• https://support.microsoft.com/en-us/help/4024323/security-update-of-windows-xp-and-window…
• http://www.securityfocus.com/bid/99012
• http://www.securitytracker.com/id/1038701

References

• CVE Record
• NVD entry