CVE-2025-21300
Published: 14 January 2025
Summary
CVE-2025-21300 is a high-severity Uncontrolled Resource Consumption (CWE-400) vulnerability in Microsoft Windows 10 1507. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked in the top 19.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SC-7 (Boundary Protection).
Deeper analysis
CVE-2025-21300 is a denial-of-service vulnerability in the Windows Universal Plug and Play (UPnP) Device Host component. It carries a CVSS 3.1 base score of 7.5 and is associated with CWE-400, indicating uncontrolled resource consumption that can be triggered remotely.
An unauthenticated attacker can send specially crafted network traffic to an affected Windows system, resulting in high availability impact without any requirement for user interaction or elevated privileges. The vulnerability allows remote termination or severe degradation of the UPnP Device Host service, disrupting dependent network discovery and device-hosting functionality.
Microsoft’s Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21300 supplies official patch information and mitigation guidance. The associated EPSS score has risen from a low baseline to a recorded peak of 0.0332, indicating emerging exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-2365
Vulnerability details
Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The CVE describes a remote DoS vulnerability in the UPnP Device Host service via uncontrolled resource consumption (CWE-400), directly enabling exploitation of a software vulnerability to crash or exhaust the service and impact availability, which maps to T1499.004 Application or System Exploitation under Endpoint Denial of Service.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly remediates the specific flaw in Windows UPnP Device Host enabling remote resource exhaustion via timely patching.
Implements denial-of-service protections to limit effects of uncontrolled resource consumption attacks on the UPnP service.
Enforces boundary protections to control and monitor network communications to the vulnerable UPnP Device Host, reducing remote unauthenticated access.