CVE-2025-54113
Published: 09 September 2025
Summary
CVE-2025-54113 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 29.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 CM-7 (Least Functionality) and SI-16 (Memory Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Requires timely application of vendor patches to directly remediate the heap-based buffer overflow vulnerability in Windows RRAS.
Deploys memory protections such as ASLR, DEP, and heap isolation to block arbitrary code execution from heap buffer overflow exploits in RRAS.
Restricts RRAS to least functionality or disables it when unnecessary, preventing network exposure to the buffer overflow vulnerability.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Heap buffer overflow enables remote arbitrary code execution against the RRAS service, directly mapping to exploitation of public-facing or remote network services.
NVD Description
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
Deeper analysisAI
CVE-2025-54113 is a heap-based buffer overflow vulnerability, classified under CWE-122, affecting the Windows Routing and Remote Access Service (RRAS). Published on 2025-09-09, it carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating high severity due to its potential for significant impact.
An unauthorized attacker can exploit this vulnerability over a network with low attack complexity and no required privileges, though user interaction is necessary. Successful exploitation enables arbitrary code execution, granting high levels of control over confidentiality, integrity, and availability.
The Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54113 details recommended mitigations and available patches.
Details
- CWE(s)