CVE-2021-36942 Microsoft Windows
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2021-11-17
- Ransomware use
- known