April 23, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Critical Apache NiFi Vulnerability Leaks MongoDB Authentication Details
March 14, 2025Mirai Botnet aka Katana – Active IOCs
March 15, 2025Critical Apache NiFi Vulnerability Leaks MongoDB Authentication Details
March 14, 2025Mirai Botnet aka Katana – Active IOCs
March 15, 2025
Severity
High
Analysis Summary
CVE-2025-24035 CVSS:8.1
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CVE-2025-24045 CVSS:8.1
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
Impact
- Code Execution
Indicators of Compromise
CVE
CVE-2025-24035
CVE-2025-24045
Affected Vendors
- Microsoft
Affected Products
- Microsoft Windows 10 Version 1809 - 10.0.17763.0
- Microsoft Windows Server 2019 - 10.0.17763.0
- Microsoft Windows Server 2019 (Server Core installation) - 10.0.17763.0
- Microsoft Windows 10 Version 22H2 - 10.0.19045.0
- Microsoft Windows Server 2025 (Server Core installation) - 10.0.26100.0
- Microsoft Windows 11 version 22H3 - 10.0.22631.0
- Microsoft Windows Server 2012 R2 - 6.3.9600.0
- Microsoft Windows Server 2012 R2 (Server Core installation) - 6.3.9600.0
- Microsoft Windows 11 Version 23H2 - 10.0.22631.0
- Microsoft Windows Server 2008 Service Pack 2 - 6.0.6003.0
- Microsoft Windows Server 23H2 Edition (Server Core installation) - 10.0.25398.0- 10.0.25398.0
Remediation
Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.
