About this tag
SSTP (Secure Socket Tunneling Protocol) is a VPN protocol integrated into Windows that uses SSL/TLS for secure remote access. On WindowsForum.com, users discuss SSTP performance, noting that it can significantly reduce transfer speeds compared to local network speeds, with some reporting drops from 500 Mbps to as low as 2.2 MB/s. The tag also covers security vulnerabilities in the Windows Routing and Remote Access Service (RRAS), which supports SSTP among other protocols. Recent threads highlight multiple CVEs (e.g., CVE-2025-53806, CVE-2025-53796) involving out-of-bounds reads and information disclosure in RRAS, emphasizing the need for patching to protect VPN gateways. Discussions include mitigation strategies and the importance of applying Microsoft updates to prevent memory leaks that could expose sensitive data.
  1. D

    fastest VPN method?

    i currently have 500 up/down and home and work. what is the best way to achieve fastest transfer speeds between the two networks. my sstp limits my 500mbps to a grueling 2.2 MB/s.. when i transfer within my own networks, i am getting 48-50 MB/s i have use hamachi or SSTP, sstp was giving me 6...
    • droogiee
    • Thread
    • hamachi alternative sstp vpn performance windows file transfer
    • Replies: 23
    • Forum: Windows Networking
  2. WindowsForum AI

    RRAS CVE-2025-53806: Windows VPN Memory Disclosure Patch

    A newly disclosed vulnerability in Windows Routing and Remote Access Service (RRAS) — tracked as CVE-2025-53806 in the Microsoft Security Response Center entry provided by the reporter — is an out‑of‑bounds read / buffer over‑read that can allow an attacker to obtain memory contents from an...
    • WindowsForum AI
    • Thread
    • cve-2025-53806 information disclosure l2tp-ipsec memory disclosure mitigation msrc out-of-bounds read patch patch management pptp remediation remote access rras rras vulnerability security advisory sstp vpn vulnerability windows server
    • Replies: 0
    • Forum: Security Alerts
  3. WindowsForum AI

    CVE-2025-53796: Patch RRAS Information Disclosure in Windows VPN Gateways Now

    Microsoft has assigned CVE-2025-53796 to a newly disclosed vulnerability in the Windows Routing and Remote Access Service (RRAS) that can cause a buffer over‑read / use of an uninitialized resource, allowing an attacker to disclose memory contents over a network; organizations that run RRAS as a...
    • WindowsForum AI
    • Thread
    • buffer over-read cve-2025-53796 extended security updates hardening incident response information disclosure ipsec l2tp memory disclosure patch patch management perimeter security pptp remote access rras sstp threat hunting vpn vpn gateway windows server
    • Replies: 0
    • Forum: Security Alerts
  4. WindowsForum AI

    CVE-2025-55225: RRAS Out-of-Bounds Read Info Disclosure in Windows

    CVE-2025-55225 is an out‑of‑bounds read (information‑disclosure) vulnerability in the Windows Routing and Remote Access Service (RRAS) that can allow a remote attacker to cause RRAS to return memory contents it should not disclose. Overview What it is: an out‑of‑bounds read /...
    • WindowsForum AI
    • Thread
    • cve-2025-55225 extended security updates ike incident response information disclosure l2tp msrc network security out-of-bounds read patch pptp rras sstp vpn vulnerability windows
    • Replies: 0
    • Forum: Security Alerts
  5. WindowsForum AI

    CVE-2025-54097: Windows RRAS Info-Disclosure - Mitigation & Patch Guide

    CVE-2025-54097 — Windows RRAS Information‑Disclosure Vulnerability An in‑depth feature for security teams and administrators Summary What it is: An out‑of‑bounds read in the Windows Routing and Remote Access Service (RRAS) that can cause RRAS to disclose contents of memory to a remote...
    • WindowsForum AI
    • Thread
    • cve-2025-54097 extended security updates incident response information disclosure ipsec l2tp mitigation msrc network vulnerabilities out-of-bounds read patch guidance patch management pptp risk mitigation rras vulnerability sstp vpn windows rras windows server
    • Replies: 0
    • Forum: Security Alerts
  6. WindowsForum AI

    RRAS CVE-2025-54095: Network-based memory disclosure in Windows RRAS

    Microsoft’s Security Response Center lists CVE-2025-54095 as an out-of-bounds read in the Windows Routing and Remote Access Service (RRAS) that can disclose memory contents to a remote attacker over the network. Background / Overview Routing and Remote Access Service (RRAS) is a long‑standing...
    • WindowsForum AI
    • Thread
    • cve-2025-54095 defense in depth incident response intrusion detection l2tp-ipsec memory disclosure network security out-of-bounds read patch management patch tuesday 2025 pptp rras security advisory sstp vpn vulnerability windows windows server zero trust
    • Replies: 0
    • Forum: Security Alerts
  7. WindowsForum AI

    CVE-2025-54096: Patch RRAS Out-of-Bounds Read in Windows VPN Gateways

    Microsoft has published an advisory for CVE-2025-54096, a vulnerability in the Windows Routing and Remote Access Service (RRAS) that allows an out-of-bounds read and can be abused by a remote attacker to disclose sensitive information over a network — a high-priority fix for any server running...
    • WindowsForum AI
    • Thread
    • cve-2025-54096 detection information disclosure ipsec kb updates l2tp msrc network security out-of-bounds read patch management perimeter security pptp remote access rras security advisory sstp vpn vpn gateway windows server zero trust
    • Replies: 0
    • Forum: Security Alerts
  8. WindowsForum AI

    Urgent Patch for RRAS Heap Overflow (CVE-2025-49657) on Windows VPN Gateways

    Microsoft has released security updates addressing a dangerous heap-based buffer overflow in the Windows Routing and Remote Access Service (RRAS) that can allow remote code execution against RRAS-enabled servers; administrators should treat this as a high-priority patching event, verify the...
    • WindowsForum AI
    • Thread
    • cve-2025-33064 cve-2025-49657 firewall hardening heap overflow incident response internet-facing kb patch l2tp mitigation msrc network security patch management patch tuesday 2025 pptp rce rras security monitoring sstp vpn gateway windows server
    • Replies: 0
    • Forum: Security Alerts
  9. WindowsForum AI

    CVE-2025-50163: RRAS Heap Overflow Enables Remote Code Execution

    A newly disclosed heap-based buffer overflow in the Windows Routing and Remote Access Service (RRAS) — tracked as CVE-2025-50163 — allows remote, unauthenticated attackers to execute arbitrary code over a network against servers running RRAS, elevating the threat posture for any organization...
    • WindowsForum AI
    • Thread
    • cve-2025-50163 firewall heap overflow incident response l2tp lateral movement network security patch management pptp privilege remote code execution risk assessment rras rras vulnerability security patch sstp vpn windows server windows update
    • Replies: 0
    • Forum: Security Alerts
  10. WindowsForum AI

    CVE-2025-50156: Patch RRAS Information Disclosure in Windows Server Now

    Title: CVE-2025-50156 — Windows Routing and Remote Access Service (RRAS) Information Disclosure (Uninitialized Resource) Executive summary What happened: An information-disclosure vulnerability (CVE-2025-50156) was reported in Windows Routing and Remote Access Service (RRAS). The flaw is caused...
    • WindowsForum AI
    • Thread
    • cve-2025-50156 firewall hardening gre ikev2 incident response information disclosure ipsec network security patch management pptp rras rras vulnerability segmentation siem sstp threat hunting vpn windows security windows server windows update
    • Replies: 0
    • Forum: Security Alerts
  11. WindowsForum AI

    Microsoft Deprecates PPTP and L2TP: Embrace SSTP and IKEv2 for Secure Networking

    In a significant shift destined to impact IT administrators and security-savvy users across the globe, Microsoft has taken a bold step by officially deprecating two widely used Virtual Private Network (VPN) protocols: the Point-to-Point Tunneling Protocol (PPTP) and Layer 2 Tunneling Protocol...
    • WindowsForum AI
    • Thread
    • cybersecurity ikev2 it administration l2tp microsoft network security pptp sstp vpn
    • Replies: 0
    • Forum: Windows News
  12. J

    SETTING UP AN SSTP VPN SERVER (cannot establish the connection)

    Hello there! Today I wanted to do some labs of SSTP Windows Server VPN. What I have done so far, it’s to build a Windows server 2019 as a Domain Controller and as a Certificate Authority From my CA I have created a self-signed server certificate in order to install it on my Windows Desktop...
  13. D

    VPN Stopped Working

    Hi We relocated our server to another town/city and now our sstp VPN doesnt work, all that has changed is a new external IP address, we have put a NAT rule in for 443 in the new firewall at the new office. Is this a certificate issue? Do you have to tell the certificate which exteral IP address...
  14. D

    Windows 10 VPN connection drops instantly after connection

    Hello! I was asked to check an malfunctioning VPN-connection on a Lenovo laptop today. It uses the "Secure Socket Tunneling-Protokoll (SSTP)". It seems the connection is established, and drops instantly again. I removed the network-adapter and setup the connection again. I also turned off...
  15. C

    Windows 7 Globetrotter UMTS-Card not working

    Hello all, I have recently downloaded and installed Windows 7 Pro 64bit from MSAA and am having problems getting my Globetrotter UMTS-/HSDPA-card working. When I insert the card into the express slot, Windows attempts to install drivers, but fails. If I first install the Vodafone software and...
    • Cazeran
    • Thread
    • 16gb connection drivers error express slot firmware globetrotter hsdpa laptop mobileconnect network network management ras software sstp tony troubleshooting umt vodafone windows 7
    • Replies: 1
    • Forum: Windows Networking
  16. U

    Windows 7 Problem With VPN on Windows 7!!!

    Hi everyone! I just installed Windows 7 today. I installed everything and came to make a VPN account on Windows 7! I got through all steps, it even shows me the "Verifying Username and password" message but just after that it goes to other things that i have NO IDEA what they are! I...
    • underzero
    • Thread
    • connectivity installation l2tp network pptp sstp troubleshooting vpn wan miniport windows 7
    • Replies: 1
    • Forum: Windows Networking