You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
l2tp-ipsec
About this tag
Discussions on WindowsForum.com about L2TP/IPsec focus on security vulnerabilities in the Windows Routing and Remote Access Service (RRAS) that affect this VPN protocol. Recent threads cover CVE-2025-53806 and CVE-2025-54095, both out-of-bounds read flaws in RRAS that can disclose memory contents to remote attackers. These vulnerabilities impact L2TP/IPsec VPN termination on Windows Server, potentially exposing session tokens and routing metadata. The tag covers security patches, memory disclosure risks, and the role of RRAS in handling L2TP/IPsec connections. Users seeking information on L2TP/IPsec security updates and related CVEs will find relevant discussions here.
A newly disclosed vulnerability in Windows Routing and Remote Access Service (RRAS) — tracked as CVE-2025-53806 in the Microsoft Security Response Center entry provided by the reporter — is an out‑of‑bounds read / buffer over‑read that can allow an attacker to obtain memory contents from an...
Microsoft’s Security Response Center lists CVE-2025-54095 as an out-of-bounds read in the Windows Routing and Remote Access Service (RRAS) that can disclose memory contents to a remote attacker over the network. Background / Overview
Routing and Remote Access Service (RRAS) is a long‑standing...