CVE-2025-21300
Published: 14 January 2025
Summary
CVE-2025-21300 is a high-severity Uncontrolled Resource Consumption (CWE-400) vulnerability in Microsoft Windows 10 1507. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked in the top 20.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SC-7 (Boundary Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly remediates the specific flaw in Windows UPnP Device Host enabling remote resource exhaustion via timely patching.
Implements denial-of-service protections to limit effects of uncontrolled resource consumption attacks on the UPnP service.
Enforces boundary protections to control and monitor network communications to the vulnerable UPnP Device Host, reducing remote unauthenticated access.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The CVE describes a remote DoS vulnerability in the UPnP Device Host service via uncontrolled resource consumption (CWE-400), directly enabling exploitation of a software vulnerability to crash or exhaust the service and impact availability, which maps to T1499.004 Application or System Exploitation under Endpoint Denial of Service.
NVD Description
Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability
Deeper analysisAI
CVE-2025-21300 is a Denial of Service vulnerability in the Windows Universal Plug and Play (UPnP) Device Host component. Published on 2025-01-14, it carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and is associated with CWE-400 (Uncontrolled Resource Consumption), though additional CWE details are unavailable from NVD.
The vulnerability can be exploited by remote attackers with network access, requiring no authentication privileges, low attack complexity, and no user interaction. Exploitation results in high availability impact, enabling denial of service through resource exhaustion or disruption of the UPnP Device Host service.
Microsoft's Security Response Center update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21300 provides details on affected versions and recommended mitigations or patches.
Details
- CWE(s)