CVE-2025-21344
Published: 14 January 2025
Summary
CVE-2025-21344 is a high-severity Improper Input Validation (CWE-20) vulnerability in Microsoft Sharepoint Server. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 42.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly addresses the improper input validation (CWE-20) root cause of this SharePoint RCE vulnerability by enforcing validation of all information inputs.
Ensures timely flaw remediation through patching the specific CVE-2025-21344 vulnerability in Microsoft SharePoint Server.
Implements memory protections such as ASLR and DEP to mitigate arbitrary code execution resulting from the input validation failure.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The CVE describes a remote code execution vulnerability in Microsoft SharePoint Server (a public-facing application) via improper input validation, directly enabling T1190 for arbitrary code execution on the server.
NVD Description
Microsoft SharePoint Server Remote Code Execution Vulnerability
Deeper analysisAI
CVE-2025-21344 is a Remote Code Execution vulnerability in Microsoft SharePoint Server. Published on 2025-01-14T18:16:00.227, it carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and is associated with CWE-20 (Improper Input Validation) and NVD-CWE-noinfo.
The vulnerability requires local access (AV:L) with low attack complexity (AC:L) and no privileges (PR:N), but user interaction is necessary (UI:R). An attacker could exploit it to achieve high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H) within the same security scope (S:U), potentially executing arbitrary code on the affected system.
The Microsoft Security Response Center advisory provides details on mitigation and patching at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21344.
Details
- CWE(s)