Vulnerabilitycritical
Critical Microsoft NTLM vulnerabilities allow remote code execution on any Windows machine
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2019-1019+1 related CVE | A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages | 8.5 group max | 15% |
From the original article
3 min read at helpnetsecurity.com
The Preempt research team found two critical Microsoft vulnerabilities that consist of three logical flaws in NTLM , the company’s proprietary authentication protocol. These vulnerabilities allow attackers to remotely execute malicious code on any Windows machine or authenticate to any web server that supports Windows Integrated Authentication (WIA) such as Exchange or ADFS .
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.