CVE-2025-55234: windows 10 1507 Auth Bypass — Fix

Description

SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against relay attacks: SMB Server signing SMB Server Extended Protection for Authentication (EPA) Microsoft is releasing this CVE to provide customers with audit capabilities to help them to assess their environment and to identify any potential device or software incompatibility issues before deploying SMB Server hardening measures that protect against relay attacks. If you have not already enabled SMB Server hardening measures, we advise customers to take the following actions to be protected from these relay attacks: Assess your environment by utilizing the audit capabilities that we are exposing in the September 2025 security updates. See Support for Audit Events to deploy SMB Server Hardening—SMB Server Signing & SMB Server EPA. Adopt appropriate SMB Server hardening measures.

Is your site exposed to CVE-2025-55234?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-287 Improper Authentication

Affected Products

Vendor	Product	Versions
microsoft	windows_10_1507	< 10.0.10240.21128
microsoft	windows_10_1507	< 10.0.10240.21128
microsoft	windows_10_1607	< 10.0.14393.8422
microsoft	windows_10_1607	< 10.0.14393.8422
microsoft	windows_10_1809	< 10.0.17763.7792
microsoft	windows_10_1809	< 10.0.17763.7792
microsoft	windows_10_21h2	< 10.0.19044.6332
microsoft	windows_10_22h2	< 10.0.19045.6332
microsoft	windows_11_22h2	< 10.0.22621.5909
microsoft	windows_11_23h2	< 10.0.22631.5909
microsoft	windows_11_24h2	< 10.0.26100.6508
microsoft	windows_server_2008	All
microsoft	windows_server_2008	All
microsoft	windows_server_2008	All
microsoft	windows_server_2012	All
microsoft	windows_server_2012	All
microsoft	windows_server_2016	< 10.0.14393.8422
microsoft	windows_server_2019	< 10.0.17763.7792
microsoft	windows_server_2022	< 10.0.20348.4106
microsoft	windows_server_2022_23h2	< 10.0.25398.1849
microsoft	windows_server_2025	< 10.0.26100.6508

References

Advisories & Patches

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55234

Other References

https://www.vicarius.io/vsociety/posts/cve-2025-55234-detection-script-smb-server-vulnerability-affecting-microsoft-systems https://www.vicarius.io/vsociety/posts/cve-2025-55234-mitigation-script-smb-server-vulnerability-affecting-microsoft-systems

Frequently Asked Questions

What is CVE-2025-55234? +

SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against relay attacks: SMB Server signing SMB Server Extended Protection for Authentication (EPA) Microsoft is releasing this CVE to provide customers with audit capabilities to help them to assess their environment and to identify any potential device or software incompatibility issues before deploying SMB Server hardening measures that protect against relay attacks. If you have not already enabled SMB Server hardening measures, we advise customers to take the following actions to be protected from these relay attacks: Assess your environment by utilizing the audit capabilities that we are exposing in the September 2025 security updates. See Support for Audit Events to deploy SMB Server Hardening—SMB Server Signing & SMB Server EPA. Adopt appropriate SMB Server hardening measures. It has a CVSS v3.1 base score of 8.8 (HIGH).

How severe is CVE-2025-55234? +

CVE-2025-55234 has a CVSS v3.1 score of 8.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2025-55234? +

CVE-2025-55234 affects products from microsoft, specifically: windows_10_1507, windows_10_1607, windows_10_1809, windows_10_21h2, windows_10_22h2, windows_11_22h2, windows_11_23h2, windows_11_24h2, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022, windows_server_2022_23h2, windows_server_2025. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-55234? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-47202

Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unauthenticated …

CVE-2026-44720

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX …

CVE-2025-24032

PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. Prior to version 0.6.13, if cert_policy …

CVE-2024-5174

A flaw in Gliffy results in broken authentication through the reset functionality of the application.

CVE-2025-27414

MinIO is a high performance object storage. Starting in RELEASE.2024-06-06T09-36-42Z and prior to RELEASE.2025-02-28T09-55-16Z, a bug in evaluating the trust …

CVE-2025-27416

Scratch-Coding-Hut.github.io is the website for Coding Hut. The website as of 28 February 2025 contained a sign in with scratch …

CVE-2025-55234