PT-2025-15541
CVE-2025-27482
·
Published
2025-04-08
·
Updated
2025-04-10
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Remote Desktop Gateway Service versions (affected versions not specified)
Description:
The issue is related to the storage of sensitive data in improperly locked memory in the Remote Desktop Gateway Service, allowing an unauthorized attacker to execute code over a network. This enables remote attackers to execute arbitrary code and affect the system. The vulnerability is associated with the use of insecure mechanisms for handling authentication data in the operating system's memory.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾