CVE-2017-11885 is a remote code execution vulnerability affecting the Routing and Remote Access Service (RRAS) across various Windows versions, including Windows 7, 8.1, 10, and multiple Windows Server editions. This vulnerability carries a CVSS score of 6.6 (Medium) and a high FAUCET Risk Score of 98/100, indicating significant potential impact. Exploitation requires high privileges (PR:H) and high attack complexity (AC:H), but successful attacks can lead to complete compromise of confidentiality, integrity, and availability (C:H/I:H/A:H). While not currently on the CISA KEV list, an ExploitDB entry exists for a similar RRAS SMB RCE on Windows 2003, and it has received some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* | ||
1511CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:* | ||
1607CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* | ||
1703CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:* | ||
1709CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.2 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.