Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-55234

SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against relay attacks: SMB Server signing SMB Server Extended Protection for Authentication (EPA) Microsoft is releasing this CVE to provide customers with audit capabilities to help them to assess their environment and to identify any potential device or software incompatibility issues before deploying SMB Server hardening measures that protect against relay attacks. If you have not already enabled SMB Server hardening measures, we advise customers to take the following actions to be protected from these relay attacks: Assess your environment by utilizing the audit capabilities that we are exposing in the September 2025 security updates. See Support for Audit Events to deploy SMB Server Hardening—SMB Server Signing & SMB Server EPA. Adopt appropriate SMB Server hardening measures.

Published

2025-09-09T17:16:06.503

Last Modified

2025-10-17T16:15:37.910

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-287
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System microsoft windows_10_1507 < 10.0.10240.21128 Yes
Operating System microsoft windows_10_1507 < 10.0.10240.21128 Yes
Operating System microsoft windows_10_1607 < 10.0.14393.8422 Yes
Operating System microsoft windows_10_1607 < 10.0.14393.8422 Yes
Operating System microsoft windows_10_1809 < 10.0.17763.7792 Yes
Operating System microsoft windows_10_1809 < 10.0.17763.7792 Yes
Operating System microsoft windows_10_21h2 < 10.0.19044.6332 Yes
Operating System microsoft windows_10_22h2 < 10.0.19045.6332 Yes
Operating System microsoft windows_11_22h2 < 10.0.22621.5909 Yes
Operating System microsoft windows_11_23h2 < 10.0.22631.5909 Yes
Operating System microsoft windows_11_24h2 < 10.0.26100.6508 Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_server_2008 r2 Yes
Operating System microsoft windows_server_2012 - Yes
Operating System microsoft windows_server_2012 r2 Yes
Operating System microsoft windows_server_2016 < 10.0.14393.8422 Yes
Operating System microsoft windows_server_2019 < 10.0.17763.7792 Yes
Operating System microsoft windows_server_2022 < 10.0.20348.4106 Yes
Operating System microsoft windows_server_2022_23h2 < 10.0.25398.1849 Yes
Operating System microsoft windows_server_2025 < 10.0.26100.6508 Yes
References