Описание
Windows Network Address Translation (NAT) Spoofing Vulnerability
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
Меры по смягчению последствий
The mitigation is disabled by default. To enable it, apply the following registry keys and reboot the machine.
reg add HKLM\SYSTEM\CurrentControlSet\Services\Winnat /v TcpSeqValidation /t REG_DWORD /d 1 /f
reg add HKLM\SYSTEM\CurrentControlSet\Services\Winnat /v TcpSeqRandomization /t REG_DWORD /d 1 /f
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Windows 11 Version 24H2 for ARM64-based Systems | ||
| Windows 11 Version 24H2 for x64-based Systems | ||
| Windows Server 2025 | ||
| Windows Server 2025 (Server Core installation) | ||
| Windows 11 Version 25H2 for ARM64-based Systems | ||
| Windows 11 Version 25H2 for x64-based Systems | ||
| Windows 11 version 26H1 for x64-based Systems | ||
| Windows 11 Version 26H1 for ARM64-based Systems |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
8.3 High
CVSS3
Связанные уязвимости
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
EPSS
8.3 High
CVSS3