CVE-2021-36942

KEV · Ransomware

Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

Vendor / Project: Microsoft
Product: Windows
Date added: Nov 3, 2021
Due date: Nov 17, 2021
Known ransomware use: Known
CWEs: CWE-749

Description

Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-36942