CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-08-17
Microsoft Windows Server Netlogon Remote Privilege Escalation Vulnerability (Zerologon, CVE-2020-1472) Security Advisory
[Affected Scope] Windows Server 2008 R2 through Windows Server 2019 configured as Active Directory Domain Controllers (DCs).
[Impact] An unauthenticated remote attacker can exploit the Netlogon Remote Protocol (MS-NRPC) to reset the domain controller's computer password, gaining full Domain Administrator privileges.
[Mitigation] Apply the official Microsoft cumulative security updates and ensure Netlogon secure channel Enforcement Mode is enabled.