CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-05-10
Windows LSA Spoofing and NTLM Relay Vulnerability (CVE-2022-26925) Security Advisory
[Affected Scope] Windows and Windows Server operating systems, specifically Active Directory Domain Controllers
[Impact] Unauthenticated remote attackers can call methods on the LSARPC interface to coerce the Domain Controller to authenticate to an arbitrary target via NTLM, leading to full domain takeover
[Mitigation] Apply the official Microsoft cumulative security updates immediately, and enforce Extended Protection for Authentication (EPA) along with SMB signing to block NTLM relay paths