7.5

CVE-2021-36942

Warning
Exploit

Windows LSA Spoofing Vulnerability

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Windows Server 2004 Version < 10.0.19041.1165
Microsoft ≫ Windows Server 2008 Version- Updatesp2
Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1 HwPlatformx64
Microsoft ≫ Windows Server 2016 Version < 10.0.14393.4583
Microsoft ≫ Windows Server 2019 Version < 10.0.17763.2114
Microsoft ≫ Windows Server 20h2 Version < 10.0.19042.1165

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

Vulnerability

Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.

Description

Apply updates per vendor instructions.

Required actions
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 93.63% 0.998
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
secure@microsoft.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
https://www.kb.cert.org/vuls/id/405600
Third Party Advisory
US Government Resource
Exploit