Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started
Vulnerabilities CVE-2020-1472

CVE-2020-1472

Medium
Open
KEV
TLP:CLEAR

Microsoft Netlogon Privilege Escalation Vulnerability

AI Analysis

No AI analysis yet.

Description

Microsoft — Netlogon — Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller. An attacker who successfully exploits the vulnerability could run a specially crafted application on a device on the network. The vulnerability is also known under the moniker of Zerologon.

Details

EPSS Score
99.51%

99.9th percentile

Confidence
100%
CISA KEV
Date Added
Nov 3, 2021
Patch Due
May 3, 2022
Used in ransomware campaigns
Required Action
Apply updates per vendor instructions.
No notes yet. Click "Add Note" to create the first analysis note.
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.