A high-severity integer overflow flaw in Microsoft Windows DHCP Server enables unauthenticated remote code execution, posing a critical risk to network infrastructure.

The vulnerability is caused by an integer overflow or wraparound (CWE-190) within the DHCP server processing logic. An unauthenticated attacker can exploit this via network packets to achieve remote code execution, provided they successfully trigger the overflow condition.

Successful exploitation allows an attacker to gain full control over the DHCP server, which is a foundational component of network operations. Given the CVSS score of 8.8, this vulnerability represents a high risk of total system compromise, potentially leading to widespread network disruption, unauthorized access to internal resources, and data exfiltration.

Immediate Action: Administrators must apply the security updates provided by Microsoft for the respective Windows versions listed in the enrichment data.

Proactive Monitoring: Review DHCP server logs for unusual packet patterns or service crashes that might indicate exploitation attempts.

Compensating Controls: Ensure that the DHCP server is isolated from untrusted networks and utilize network-level access controls to restrict access to the DHCP port (UDP 67) to authorized internal clients only.

Public Exploit Available: No

This vulnerability presents a significant risk to organizational stability by targeting a core network service. Security teams should prioritize patching affected Windows Server and client installations immediately to prevent potential remote code execution. If patching cannot be performed during the current maintenance window, restrict network access to the DHCP service to reduce the attack surface.