CVE-2017-8461

Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution Vulnerability."

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

20.41% chance of exploitation in the next 30 days, 97th percentile

Published

2017-06-15

Updated

2024-08-05

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/161672/Microsoft-Windows-RRAS-Service-MIBEntryGet-Ov…

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/smb_rras_erraticgoph…

References

• CVE Record
• NVD entry

Related

• CVE-2017-8422
• CVE-2017-8462
• CVE-2017-8419
• CVE-2017-8464
• CVE-2017-8418
• CVE-2017-8465