CVE-2024-43453: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.6414Patch KB5044277 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.22221Patch KB5044343 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.25118Patch KB5044342 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.27366Patch KB5044321 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.22918Patch KB5044306 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.7428Patch KB5044293 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.1189Patch KB5044288 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.2762Patch KB5044281
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43453?
CVE-2024-43453 has been rated as a critical remote code execution vulnerability affecting the Windows Routing and Remote Access Service.
How do I fix CVE-2024-43453?
To fix CVE-2024-43453, apply the appropriate security updates specific to your affected Microsoft Windows Server version.
Which Windows Server versions are affected by CVE-2024-43453?
CVE-2024-43453 affects multiple Windows Server versions including 2008 R2, 2012, 2016, 2019, and 2022.
Can CVE-2024-43453 be exploited remotely?
Yes, CVE-2024-43453 can be exploited remotely, allowing attackers to execute arbitrary code on affected systems.
Is there a workaround for CVE-2024-43453?
Currently, the best mitigation for CVE-2024-43453 is to apply the security updates provided by Microsoft.