CNNVD-202509-1343 Information
CNNVD ID
CNNVD-202509-1343
Related CVE
- CNNVD Published: 2025-09-09
Description (Chinese)
Microsoft Windows Routing and Remote Access Service是美国微软（Microsoft）公司的一种网络服务，用于实现网络路由、虚拟专用网络（VPN）和拨号连接等功能。 Microsoft Windows Routing and Remote Access Service存在安全漏洞。攻击者利用该漏洞可以获取敏感信息。以下产品和版本受到影响：Windows Server 2008 for 32-bit Systems Service Pack 2,Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation),Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation),Windows Server 2008 R2 for x64-based Systems Service Pack 1,Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation),Windows Server 2012,Windows Server 2012 (Server Core installation),Windows Server 2012 R2,Windows Server 2012 R2 (Server Core installation),Windows Server 2025 (Server Core installation),Windows Server 2022, 23H2 Edition (Server Core installation),Windows Server 2025,Windows Server 2016,Windows Server 2016 (Server Core installation),Windows Server 2019,Windows Server 2019 (Server Core installation),Windows Server 2022,Windows Server 2022 (Server Core installation)。
Description (English)
Microsoft Windows Routing and Remote Access Service is a network service of Microsoft Corporation in the United States, which is used to perform network routing, virtual private network (VPN) and dial-up connectivity. There is a security gap in Microsoft Windows Roading and Remote Access Service. The attackers use that loophole to obtain sensitive information. The following products and versions have been affected: Windows Service 2008 for 32-bit Systems Service Pack 2, Windows Service 2008 for 32-bit Systems Service Pack 2 (Server Code Service Service 2008 for x64-based Systems Service Pack 2, Windows Service 2008 for x 64-bastems Service Pack 2, Windows Service Service Service Pack 2, Windows Service Service Service Building 2, Windows Service Service Service Building, 2012-Wish Server Services Service, 2012-Wish Services Server Service, 2012-Soverer Server Services Service, Service Service Services Service Service Service, Service Service Service Service Service, Inc., Service Service Service Service Services in World Services, 2012-Sover Services, 2012-Sover Services Management Service, Department Service Service Services, Service Service Services in World Service, Geneva Services, 2012-Sover Services, 2012-Sover Services, 2012-Sover Services in World Services, 2012-Sover Services, 2012-Sover Service Services, 2012-Sover Services, In World Service Service Services, 2012-Sal-Sover Services, 2012-Sover Services Service Services, 2012-Sover Services in World,
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Mida Solutions
Published
2025-09-09
Last Modified
2026-02-24
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53806
Patch
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53806
Share on: