CVE-2017-8461: High severity microsoft windows server vulnerability

Published Jun 15, 2017

Updated

Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution Vulnerability."

Affected Software

2 affected components

Microsoft Windows Server 2003

Microsoft Windows XP

Remediation

Patch Available

https://support.microsoft.com/en-us/help/4024323/security-update-of-windows-xp-and-windows-server-2003

Event History

Jun 15, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-8461?

CVE-2017-8461 is classified as a critical remote code execution vulnerability.

How do I fix CVE-2017-8461?

To mitigate CVE-2017-8461, you should disable the Routing and Remote Access Service on affected Windows XP and Windows Server 2003 systems.

What systems are affected by CVE-2017-8461?

CVE-2017-8461 affects Windows Server 2003 and Windows XP that have Routing and Remote Access Service enabled.

What type of attack is associated with CVE-2017-8461?

CVE-2017-8461 allows an attacker to execute arbitrary code on a vulnerable RPC server.

Is CVE-2017-8461 easily exploitable?

Yes, CVE-2017-8461 can be exploited through a specially crafted application targeting the RPC server.