Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-21208

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microsoft

Description

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows Server 2008 R2 Service Pack 1

  • 6.1.7601.0 to < 6.1.7601.27566affected

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)

  • 6.1.7601.0 to < 6.1.7601.27566affected

Microsoft Windows Server 2008 Service Pack 2

  • 6.0.6003.0 to < 6.0.6003.23117affected

Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)

  • 6.0.6003.0 to < 6.0.6003.23117affected

Microsoft Windows Server 2012

  • 6.2.9200.0 to < 6.2.9200.25317affected

Microsoft Windows Server 2012 (Server Core installation)

  • 6.2.9200.0 to < 6.2.9200.25317affected

Microsoft Windows Server 2012 R2

  • 6.3.9600.0 to < 6.3.9600.22417affected

Microsoft Windows Server 2012 R2 (Server Core installation)

  • 6.3.9600.0 to < 6.3.9600.22417affected

Microsoft Windows Server 2016

  • 10.0.14393.0 to < 10.0.14393.7785affected

Microsoft Windows Server 2016 (Server Core installation)

  • 10.0.14393.0 to < 10.0.14393.7785affected

Microsoft Windows Server 2019

  • 10.0.17763.0 to < 10.0.17763.6893affected

Microsoft Windows Server 2019 (Server Core installation)

  • 10.0.17763.0 to < 10.0.17763.6893affected

Microsoft Windows Server 2022

  • 10.0.20348.0 to < 10.0.20348.3207affected

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)

  • 10.0.25398.0 to < 10.0.25398.1425affected

Microsoft Windows Server 2025

  • 10.0.26100.0 to < 10.0.26100.3194affected

Microsoft Windows Server 2025 (Server Core installation)

  • 10.0.26100.0 to < 10.0.26100.3194affected

References