EUVD-2025-17745Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
6DescriptionCVE.org
Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
AnalysisAI
Protection mechanism failure in Windows DHCP Server that enables network-based denial-of-service attacks without requiring authentication or user interaction. An attacker can remotely exploit this vulnerability to render DHCP services unavailable, disrupting network connectivity for affected systems. The high CVSS score of 7.5 and network attack vector indicate significant availability impact, though no confidentiality or integrity compromise occurs.
Technical ContextAI
This vulnerability resides in Windows DHCP Server (Dynamic Host Configuration Protocol), a critical network service responsible for automatic IP address allocation and network configuration distribution. The root cause is classified under CWE-693 (Protection Mechanism Failure), indicating insufficient validation or enforcement of security controls in the DHCP protocol implementation. The failure likely involves inadequate input validation, rate limiting, or request handling that allows an attacker to send specially crafted DHCP packets that crash the service or exhaust server resources. The attack vector is network-based (AV:N) with low attack complexity (AC:L), meaning exploitation requires no special network positioning or advanced techniques. The vulnerability affects Windows DHCP Server implementations across multiple versions; specific CPE strings would target microsoft:windows_server with DHCP role enabled.
RemediationAI
- Apply the official Microsoft security patch immediately upon release (monitor Microsoft Security Response Center - MSRC). 2) If patching cannot be completed immediately, implement network-level mitigations: restrict DHCP server access via firewall rules to trusted clients only; disable DHCP services on internet-facing interfaces if possible. 3) Deploy DHCP relay agent filtering on network switches to validate DHCP traffic. 4) Monitor DHCP server logs for abnormal request patterns or service crashes. 5) Configure DHCP failover/redundancy to minimize availability impact if primary server is compromised. 6) Update intrusion detection/prevention systems to detect malformed DHCP packets matching this vulnerability signature once published. Patch availability and specific KB article numbers should be obtained from the official Microsoft Security Update Guide.
Windows MSHTML component contains a remote code execution vulnerability that allows attackers to craft malicious ActiveX
Windows Win32k contains an out-of-bounds write vulnerability enabling local privilege escalation to SYSTEM, exploited by
The Windows VBScript engine contains a remote code execution vulnerability in object handling that allows full system co
Windows Win32k fails to properly handle objects in memory, allowing local privilege escalation exploited in the wild in
A privilege escalation vulnerability (CVSS 5.5). Risk factors: actively exploited (KEV-listed), EPSS 94% exploitation pr
Windows Kernel contains a TOCTOU race condition vulnerability allowing local privilege escalation, exploited by the OilR
Windows Internet Shortcut Files (.url) contain an external control vulnerability (CVE-2025-33053, CVSS 8.8) that enables
Windows SMB contains an improper access control vulnerability (CVE-2025-33073, CVSS 8.8) enabling authenticated attacker
Twonky Server 8.5.2 on Linux and Windows allows unauthenticated access to the admin log file through a web service API b
An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote
FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbit
Serviio Media Server versions 1.4 through 1.8 on Windows contain an unauthenticated command injection in the /rest/actio
Same weakness CWE-693 – Protection Mechanism Failure
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today