A heap-based buffer overflow in the Microsoft Windows Routing and Remote Access Service (RRAS) permits unauthenticated remote code execution, posing a critical security risk.

The vulnerability is a heap-based buffer overflow (CWE-122) within the RRAS component. It allows an unauthenticated attacker to trigger memory corruption and achieve remote code execution over a network.

The vulnerability carries a CVSS score of 8.8, reflecting its high potential for system compromise. Successful exploitation grants an attacker full control over the affected server, leading to potential data exfiltration, lateral movement within the network, and complete service disruption.

Immediate Action: Administrators must apply the security updates provided by Microsoft in the official update guide to patch the vulnerable RRAS component.

Proactive Monitoring: Review system and application logs for unusual crashes or unexpected process execution patterns originating from the RRAS service.

Compensating Controls: Restrict network access to the RRAS service using host-based firewalls or network access control lists to limit exposure to only trusted IP addresses.

Public Exploit Available: Unknown.

Given the severity of remote code execution vulnerabilities in core Windows networking services, immediate patching is required. Organizations should prioritize the deployment of the vendor-supplied updates to all affected server instances to mitigate the risk of unauthorized system takeover.