CVE-2020-1472

Microsoft Netlogon Privilege Escalation Vulnerability

Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller. An attacker who successfully exploits the vulnerability could run a specially crafted application on a device on the network. The vulnerability is also known under the moniker of Zerologon.

Actief misbruikt. Toegevoegd aan de CISA KEV-catalogus op 3 nov. Vereiste actie: Apply updates per vendor instructions. Bekend gebruik in ransomwarecampagnes.

Meldingen over deze CVE

1 meldingen uit 1 bronnen, oudste eerst

Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use
Cisco Talos IntelligenceOnderzoek17 sep
Actief misbruikt, ransomwareEPSS 99%CVE-2020-1472 CVE-2025-24799 CVE-2025-2479 Cisco
prio35middel

CVE-2020-1472

Meldingen over deze CVE

Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use