Description
Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller. An attacker who successfully exploits the vulnerability could run a specially crafted application on a device on the network. The vulnerability is also known under the moniker of Zerologon.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Windows Server 2008 R2 Service Pack 1 | Microsoft / Windows Server 2008 R2 Service Pack 1 | >= 6.1.0, < publication | affected |
| Windows Server 2008 R2 Service Pack 1 (Server Core installation) | Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation) | >= 6.0.0, < publication | affected |
| Windows Server 2012 | Microsoft / Windows Server 2012 | >= 6.2.0, < publication | affected |
| Windows Server 2012 R2 | Microsoft / Windows Server 2012 R2 | >= 6.3.0, < publication | affected |
| Windows Server 2012 R2 (Server Core installation) | Microsoft / Windows Server 2012 R2 (Server Core installation) | >= 6.3.0, < publication | affected |
| Windows Server 2012 (Server Core installation) | Microsoft / Windows Server 2012 (Server Core installation) | >= 6.2.0, < publication | affected |
| Windows Server 2016 | Microsoft / Windows Server 2016 | >= 10.0.0, < publication | affected |
| Windows Server 2016 (Server Core installation) | Microsoft / Windows Server 2016 (Server Core installation) | >= 10.0.0, < publication | affected |
| Windows Server 2019 | Microsoft / Windows Server 2019 | >= 10.0.0, < publication | affected |
| Windows Server 2019 (Server Core installation) | Microsoft / Windows Server 2019 (Server Core installation) | >= 10.0.0, < publication | affected |
| Windows Server, version 1903 (Server Core installation) | Microsoft / Windows Server, version 1903 (Server Core installation) | >= 10.0.0, < publication | affected |
| Windows Server, version 1909 (Server Core installation) | Microsoft / Windows Server, version 1909 (Server Core installation) | >= 10.0.0, < publication | affected |
| Windows Server version 2004 | Microsoft / Windows Server version 2004 | >= 10.0.0, < publication | affected |
| Windows Server version 20H2 | Microsoft / Windows Server version 20H2 | >= 10.0.0, < publication | affected |