Vulnerability Details : CVE-2017-8461

Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution Vulnerability."
Vulnerability category: Execute code
Published 2017-06-15 20:29:00
Updated 2021-03-29 14:07:07
View at NVD,
At least one public exploit which can be used to exploit this vulnerability exists!

Exploit prediction scoring system (EPSS) score for CVE-2017-8461

Probability of exploitation activity in the next 30 days: 27.35%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 96 % EPSS Score History EPSS FAQ

Metasploit modules for CVE-2017-8461

  • Microsoft Windows RRAS Service MIBEntryGet Overflow
    Disclosure Date: 2017-06-13
    First seen: 2021-03-12
    This module exploits an overflow in the Windows Routing and Remote Access Service (RRAS) to execute code as SYSTEM. The RRAS DCERPC endpoint is accessible to unauthenticated users via SMBv1 browser named pipe on Windows Server 2003 and Windows XP hosts;

CVSS scores for CVE-2017-8461

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Source

References for CVE-2017-8461

Products affected by CVE-2017-8461

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to terms of use!