PT-2025-36891 · Microsoft · Smb Server+1

Published 2025-09-09 · Updated 2026-03-10 · CVE-2025-55234

Positive Technologies · (AI Summary)

CVSS v3.1

10

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Server Message Block (SMB) versions prior to September 2025 Patch Tuesday

Description The SMB Server may be susceptible to relay attacks depending on the configuration. Successful exploitation of this issue could allow an attacker to perform relay attacks and potentially elevate privileges. Microsoft has released audit capabilities in the September 2025 security updates to help identify potential device or software incompatibility issues before deploying SMB Server hardening measures. The vulnerability is related to flaws in the authentication procedure of the Windows SMB server.

Recommendations Assess your environment by utilizing the audit capabilities released in the September 2025 security updates. Adopt appropriate SMB Server hardening measures, including enabling SMB Server signing and SMB Server Extended Protection for Authentication (EPA).

Exploit

Fix

LPE

RCE

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2025-10913

CVE-2025-55234

Affected Products

Smb Server

Windows

References · 66

• 🔥 https://github.com/mrk336/CVE-2025-55234 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-55234 · Security Note
• https://bdu.fstec.ru/vul/2025-10913 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55234 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-55234 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-55234 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55234 · Security Note
• https://vicarius.io/vsociety/posts/cve-2025-55234-mitigation-script-smb-server-vulnerability-affecting-microsoft-systems · Note
• https://twitter.com/nakultomar___/status/1972341858413294029 · Twitter Post
• https://twitter.com/nakultomar___/status/1969336664930631926 · Twitter Post
• https://twitter.com/Newtalics/status/1966014583514005640 · Twitter Post
• https://twitter.com/Weezy_Dev/status/1969301240774361330 · Twitter Post
• https://twitter.com/grok/status/1965526842103976338 · Twitter Post
• https://t.me/EchelonEyes/4049 · Telegram Post
• https://twitter.com/rapid7/status/1966592963951116312 · Twitter Post