OnlyPatch
Windows DHCP Server

CVE-2019-0725 — Windows DHCP Server Remote Code Execution Vulnerability

Critical CVSS 9.8 EPSS 0.26264 2019-05 archive

Executive Summary

A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. To exploit the vulnerability, a remote unauthenticated attacker could send a specially crafted packet to an affected DHCP server. The security update addresses the vulnerability by correcting how DHCP servers handle network packets.

Overview

9.8
CVSS CRITICAL
Critical
MS Severity
Not Exploited
MS Exploit Status
Less Likely
MS Exploit Likelihood
Category Remote Code Execution
Released May 14 2019
Last Updated May 14 2019
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.26264 — 0.97787 percentile
NVD CVSS 9.8 CRITICAL — differs from MSRC

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
ATTACK VECTOR
Network
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
None
USER INTERACTION
None
SCOPE
Unchanged
CONFIDENTIALITY
High
INTEGRITY
High
AVAILABILITY
High
EXPLOIT CODE MATURITY
Proof-of-Concept
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 7.3

EPSS Score

0.26264
probability of exploitation in the next 30 days
0.97787 percentile - updated 2026-07-25
View on FIRST.org

Affected Products

6 affected products
Product KB Article Severity Impact Restart Required
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 4499164 (Monthly Rollup) 4499175 (Security Only) Critical Remote Code Execution 4493472 Base: 8.1 Temporal: 7.3 Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C Yes None Windows Server 2008 R2 for x64-based Systems Service Pack 1 4499164 (Monthly Rollup) 4499175 (Security Only) Critical Remote Code Execution 4493472 Base: 8.1 Temporal: 7.3 Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C Yes None Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 4499164 (Monthly Rollup) 4499175 (Security Only) Critical Remote Code Execution 4493472 Base: 8.1 Temporal: 7.3 Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C Yes None Windows Server 2012 4499171 (Monthly Rollup) 4499158 (Security Only) Critical Remote Code Execution 4493451 Base: 8.1 Temporal: 7.3 Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C Yes None Windows Server 2012 (Server Core installation) 4499171 (Monthly Rollup) 4499158 (Security Only) Critical Remote Code Execution 4493451 Base: 8.1 Temporal: 7.3 Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C Yes None Windows Server 2012 R2 4499151 (Monthly Rollup) 4499165 (Security Only) Critical Remote Code Execution 4493446 Base: 8.1 Temporal: 7.3 Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C Yes None Windows Server 2012 R2 (Server Core installation) 4499151 (Monthly Rollup) 4499165 (Security Only) Critical Remote Code Execution 4493446 Base: 8.1 Temporal: 7.3 Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C Yes None Windows Server 2016 4494440 (Security Update) Critical Remote Code Execution Yes
Windows Server 2016 (Server Core installation) 4494440 (Security Update) Critical Remote Code Execution Yes
Windows Server 2019 4494441 (Security Update) Critical Remote Code Execution Yes
Windows Server 2019 (Server Core installation) 4494441 (Security Update) Critical Remote Code Execution Yes
Windows Server, version 1803 (Server Core Installation) 4499167 (Security Update) Critical Remote Code Execution Yes
Windows Server, version 1903 (Server Core installation) 4497936 (Security Update) Critical Remote Code Execution Yes

Patches

4 patches
Article Type Restart
4494440 Security Update Yes
4494441 Security Update Yes
4499167 Security Update Yes
4497936 Security Update Yes

Known Exploits

Acknowledgments

Microsoft Windows Enterprise Security Team

On This Page