The vulnerability is an improper authentication flaw in the Windows DHCP Server. An attacker who already has authorized local access can use this flaw to bypass a built‑in security feature on the host. The bypass can potentially allow modification of DHCP configurations or disable safeguards that protect the network traffic. The weakness is classified as CWE‑288 related to improper authorization.

Affected products include Microsoft Windows 10, versions 1607 and 1809, and Windows Server from 2012 through 2025 in both standard and Server Core deployments. The broad operating system coverage means that any environment running a DHCP service on these platforms could be impacted if the service is running on an unpatched system.

The CVSS base score of 5.5 indicates moderate severity. A local attacker with authorized credentials could exploit the vulnerability; remote exploitation is not supported according to the description. The EPSS score is not available, and the vulnerability is not currently listed in the CISA KEV catalog, implying limited known exploitation activity. Administrators should evaluate the risk based on the presence of authorized users on the host and consider mitigating or patching accordingly.