CVE-2021-36942: Windows LSA Spoofing Vulnerability
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-36942?
CVE-2021-36942 has a severity rating of critical, allowing unauthenticated attackers to exploit the vulnerability.
How do I fix CVE-2021-36942?
To mitigate CVE-2021-36942, apply the security updates provided by Microsoft for the affected Windows versions.
What versions of Windows are affected by CVE-2021-36942?
CVE-2021-36942 affects various Windows Server versions, including 2004, 2008, 2012, 2016, 2019, and 20H2.
Can CVE-2021-36942 be exploited remotely?
Yes, CVE-2021-36942 can be exploited remotely by an unauthenticated attacker to perform unauthorized actions.
What type of attack is associated with CVE-2021-36942?
CVE-2021-36942 involves a spoofing vulnerability that allows attackers to coerce authentication through the LSARPC interface.