Vulnerability Details : CVE-2017-8461

Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution Vulnerability."

Vulnerability category: Execute code

Published 2017-06-15 20:29:00

Updated 2021-03-29 14:07:07

Source Microsoft Corporation

View at NVD, CVE.org

At least one public exploit which can be used to exploit this vulnerability exists!

Exploit prediction scoring system (EPSS) score for CVE-2017-8461

Probability of exploitation activity in the next 30 days: 27.35%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 96 % EPSS Score History EPSS FAQ

Metasploit modules for CVE-2017-8461

Microsoft Windows RRAS Service MIBEntryGet Overflow

Disclosure Date: 2017-06-13

First seen: 2021-03-12

exploit/windows/smb/smb_rras_erraticgopher

This module exploits an overflow in the Windows Routing and Remote Access Service (RRAS) to execute code as SYSTEM. The RRAS DCERPC endpoint is accessible to unauthenticated users via SMBv1 browser named pipe on Windows Server 2003 and Windows XP hosts;

More information

CVSS scores for CVE-2017-8461

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C	3.4	10.0	nvd@nist.gov
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	nvd@nist.gov
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2017-8461

https://support.microsoft.com/en-us/help/4024323/security-update-of-windows-xp-and-windows-server-2003

Description of the security update of Windows XP and Windows Server 2003: June 13, 2017
Patch;Vendor Advisory
http://packetstormsecurity.com/files/161672/Microsoft-Windows-RRAS-Service-MIBEntryGet-Overflow.html

Microsoft Windows RRAS Service MIBEntryGet Overflow ≈ Packet Storm
Exploit;Third Party Advisory;VDB Entry
http://www.securityfocus.com/bid/99012

Microsoft Windows RPC CVE-2017-8461 Remote Code Execution Vulnerability
Third Party Advisory;VDB Entry
http://www.securitytracker.com/id/1038701

Windows RPC Request Processing Bug in Routing and Remote Access Service Lets Remote Users Execute Arbitrary Code on the Target System - SecurityTracker
Third Party Advisory;VDB Entry

Products affected by CVE-2017-8461