CVE-2025-21294
Published: 14 January 2025
Summary
CVE-2025-21294 is a high-severity Sensitive Data Storage in Improperly Locked Memory (CWE-591) vulnerability in Microsoft Windows 10 1507. Its CVSS base score is 8.1 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 16.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and CM-7 (Least Functionality).
Deeper analysis
Microsoft Digest Authentication is affected by a remote code execution vulnerability tracked as CVE-2025-21294. The flaw carries a CVSS 3.1 score of 8.1 and is associated with CWE-591, indicating an issue in the handling of digest authentication credentials that can be triggered over the network.
An unauthenticated attacker can exploit the vulnerability remotely with no user interaction required, though the attack complexity is rated high. Successful exploitation grants the attacker full control over confidentiality, integrity, and availability on the affected system.
The official Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21294 provides patch and mitigation guidance. EPSS scores remain low, with a current value of 0.0191 and a peak of 0.0239, indicating limited observed exploitation interest to date.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-2359
Vulnerability details
Microsoft Digest Authentication Remote Code Execution Vulnerability
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The CVE describes an unauthenticated remote code execution vulnerability in a network-accessible Microsoft Digest Authentication component with no user interaction required, directly enabling T1190 Exploit Public-Facing Application.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly mitigates the remote code execution vulnerability in Microsoft Digest Authentication by requiring timely application of vendor patches as detailed in the MSRC update guide.
Identifies the presence of CVE-2025-21294 through periodic vulnerability scanning of systems using Digest Authentication, enabling proactive remediation.
Reduces attack surface by disabling or restricting unnecessary legacy Digest Authentication functionality vulnerable to this unauthenticated RCE.