【Vulnerability Alert】A high-risk security vulnerability (CVE-2025-33073) has been identified in Windows SMB. Please verify and apply the necessary patches as soon as possible.
Source: Ministry of education information & communication security contingency platform
"" "" ""
| Publication Number | TACERT-ANA-2025102901104040 | Publication Time | 2025/10/29 13:18 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2025/10/29 13:18 |
| Impact Level | Medium | ||
| [Subject] 【Vulnerability Alert】A high-risk security vulnerability (CVE-2025-33073) has been identified in Windows SMB. Please verify and apply the necessary patches as soon as possible. |
|||
| [Content] Forwarded from the National Institute of Cyber Security NISAC-200-202510-00000308 Researchers have discovered an NTLM reflection vulnerability (CVE-2025-33073) in the Windows SMB client. A remote attacker with normal user privileges could exploit this issue by executing a malicious script that forces the SMB client to connect and authenticate to an attacker-controlled SMB server. Due to a flaw in the SMB client’s authentication process, the attacker could bypass security checks, escalate privileges to system level, and gain control of the client system. This vulnerability has already been exploited by attackers. Please verify and apply the necessary security patches as soon as possible. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
|
[Affected Platform] ● Windows Server 2025 ● Windows Server 2022, 23H2 Edition (Server Core installation) ● Windows Server 2022 (Server Core installation) ● Windows Server 2022 ● Windows Server 2019 (Server Core installation) ● Windows Server 2019 ● Windows Server 2016 (Server Core installation) ● Windows Server 2016 ● Windows Server 2012 R2 (Server Core installation) ● Windows Server 2012 R2 ● Windows Server 2012 (Server Core installation) ● Windows Server 2012 ● Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) ● Windows Server 2008 R2 for x64-based Systems Service Pack 1 ● Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) ● Windows Server 2008 for x64-based Systems Service Pack 2 ● Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) ● Windows Server 2008 for 32-bit Systems Service Pack 2 ● Windows 11 Version 24H2 for x64-based Systems ● Windows 11 Version 24H2 for ARM64-based Systems ● Windows 11 Version 23H2 for x64-based Systems ● Windows 11 Version 23H2 for ARM64-based Systems ● Windows 11 Version 22H2 for x64-based Systems ● Windows 11 Version 22H2 for ARM64-based Systems ● Windows 10 Version 22H2 for x64-based Systems ● Windows 10 Version 22H2 for ARM64-based Systems ● Windows 10 Version 22H2 for 32-bit Systems ● Windows 10 Version 21H2 for x64-based Systems ● Windows 10 Version 21H2 for ARM64-based Systems ● Windows 10 Version 21H2 for 32-bit Systems ● Windows 10 Version 1809 for x64-based Systems ● Windows 10 Version 1809 for 32-bit Systems ● Windows 10 Version 1607 for x64-based Systems ● Windows 10 Version 1607 for 32-bit Systems ● Windows 10 for x64-based Systems ● Windows 10 for 32-bit Systems |
|||
| [Recommended Actions] The vendor has released official patches for this vulnerability. Please refer to the official advisory for update instructions at the following URL:https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33073 |
|||
|
[Reference] 2. https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-33073 3. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33073 4. https://www.vicarius.io/vsociety/posts/cve-2025-33073-mitigation-script-improper-access-control-in-windows-smb-affects-microsoft-products |
|||
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw