CVE-2024-38154

Deeper analysis

Windows Routing and Remote Access Service (RRAS) contains a remote code execution vulnerability tracked as CVE-2024-38154. The flaw is present in the RRAS component of Windows and is associated with CWE-122. It received a CVSS 3.1 score of 8.8 reflecting network attack vector, low attack complexity, no required privileges, and required user interaction.

An unauthenticated attacker can exploit the issue over the network by sending specially crafted traffic that triggers the vulnerability after a user performs an action such as visiting a malicious page or opening a crafted file. Successful exploitation grants the attacker the ability to execute arbitrary code with the privileges of the RRAS process, resulting in full confidentiality, integrity, and availability impact on the affected system.

The official Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38154 addresses mitigation steps and patch availability. The EPSS score has remained flat at a peak of 0.0806 with no material increase observed after disclosure.