Yüksek CISA KEV
CVE-2020-1472: Microsoft Netlogon: aktif olarak istismar edilen açık
Açıklama (NVD)
Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller. An attacker who successfully exploits the vulnerability could run a specially crafted application on a device on the network. The vulnerability is also known under the moniker of Zerologon.
Özet bilgiler
- EPSS
- %99,39 (yüzdelik 100)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2021-11-03 · Son tarih: 2022-05-03 · fidye yazılımı kampanyalarında kullanıldı
Gerekli aksiyon: Apply updates per vendor instructions.