CVE-2025-21208

CVE.org · Published

Historical CVEs JSON AI instructions

Record status: Published
Identifier year (not publication year): 2025
Source publication: Feb 11, 2025
Source updated: Feb 26, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

Plain text

CNA source text (English)

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Windows Server 2008 R2 Service Pack 1

Vendor: Microsoft
Product: Windows Server 2008 R2 Service Pack 1
Platforms: x64-based Systems
Default status: Unknown

Windows Server 2008 R2 Service Pack 1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.1.7601.0	`affected`	custom	6.1.7601.27566	Unavailable	None listed

Windows Server 2008 R2 Service Pack 1 (Server Core installation)

Vendor: Microsoft
Product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Platforms: x64-based Systems
Default status: Unknown

Windows Server 2008 R2 Service Pack 1 (Server Core installation) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.1.7601.0	`affected`	custom	6.1.7601.27566	Unavailable	None listed

Windows Server 2008 Service Pack 2

Vendor: Microsoft
Product: Windows Server 2008 Service Pack 2
Platforms: 32-bit Systems
x64-based Systems
Default status: Unknown

Windows Server 2008 Service Pack 2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.0.6003.0	`affected`	custom	6.0.6003.23117	Unavailable	None listed

Windows Server 2008 Service Pack 2 (Server Core installation)

Vendor: Microsoft
Product: Windows Server 2008 Service Pack 2 (Server Core installation)
Platforms: 32-bit Systems
x64-based Systems
Default status: Unknown

Windows Server 2008 Service Pack 2 (Server Core installation) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.0.6003.0	`affected`	custom	6.0.6003.23117	Unavailable	None listed

Windows Server 2012

Vendor: Microsoft
Product: Windows Server 2012
Platforms: x64-based Systems
Default status: Unknown

Windows Server 2012 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.2.9200.0	`affected`	custom	6.2.9200.25317	Unavailable	None listed

Windows Server 2012 (Server Core installation)

Vendor: Microsoft
Product: Windows Server 2012 (Server Core installation)
Platforms: x64-based Systems
Default status: Unknown

Windows Server 2012 (Server Core installation) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.2.9200.0	`affected`	custom	6.2.9200.25317	Unavailable	None listed

Windows Server 2012 R2

Vendor: Microsoft
Product: Windows Server 2012 R2
Platforms: x64-based Systems
Default status: Unknown

Windows Server 2012 R2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.3.9600.0	`affected`	custom	6.3.9600.22417	Unavailable	None listed

Windows Server 2012 R2 (Server Core installation)

Vendor: Microsoft
Product: Windows Server 2012 R2 (Server Core installation)
Platforms: x64-based Systems
Default status: Unknown

Windows Server 2012 R2 (Server Core installation) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.3.9600.0	`affected`	custom	6.3.9600.22417	Unavailable	None listed

Windows Server 2016

Vendor: Microsoft
Product: Windows Server 2016
Platforms: x64-based Systems
Default status: Unknown

Windows Server 2016 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
10.0.14393.0	`affected`	custom	10.0.14393.7785	Unavailable	None listed

Windows Server 2016 (Server Core installation)

Vendor: Microsoft
Product: Windows Server 2016 (Server Core installation)
Platforms: x64-based Systems
Default status: Unknown

Windows Server 2016 (Server Core installation) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
10.0.14393.0	`affected`	custom	10.0.14393.7785	Unavailable	None listed

Windows Server 2019

Vendor: Microsoft
Product: Windows Server 2019
Platforms: x64-based Systems
Default status: Unknown

Windows Server 2019 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
10.0.17763.0	`affected`	custom	10.0.17763.6893	Unavailable	None listed

Windows Server 2019 (Server Core installation)

Vendor: Microsoft
Product: Windows Server 2019 (Server Core installation)
Platforms: x64-based Systems
Default status: Unknown

Windows Server 2019 (Server Core installation) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
10.0.17763.0	`affected`	custom	10.0.17763.6893	Unavailable	None listed

Windows Server 2022

Vendor: Microsoft
Product: Windows Server 2022
Platforms: x64-based Systems
Default status: Unknown

Windows Server 2022 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
10.0.20348.0	`affected`	custom	10.0.20348.3207	Unavailable	None listed

Windows Server 2022, 23H2 Edition (Server Core installation)

Vendor: Microsoft
Product: Windows Server 2022, 23H2 Edition (Server Core installation)
Platforms: x64-based Systems
Default status: Unknown

Windows Server 2022, 23H2 Edition (Server Core installation) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
10.0.25398.0	`affected`	custom	10.0.25398.1425	Unavailable	None listed

Windows Server 2025

Vendor: Microsoft
Product: Windows Server 2025
Platforms: x64-based Systems
Default status: Unknown

Windows Server 2025 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
10.0.26100.0	`affected`	custom	10.0.26100.3194	Unavailable	None listed

Windows Server 2025 (Server Core installation)

Vendor: Microsoft
Product: Windows Server 2025 (Server Core installation)
Platforms: x64-based Systems
Default status: Unknown

Windows Server 2025 (Server Core installation) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
10.0.26100.0	`affected`	custom	10.0.26100.3194	Unavailable	None listed