VDB
CVE-2019-1384
CVE-2019-1384
PUBLISHED
In verschiedenen Microsoft Windows Betriebssystemen existiert eine Schwachstelle. Sie beruht auf einem Fehler bei der Prüfung von NTLM Netzwerkauthentifizierungsnachrichten. Ein authentisierter Angreifer kann dieses nutzen und die Sicherheitsfunktion umgehen.
EPSS 2.66% · 86.1th percentile
Risk Scores
EPSS Score
2.66%
86.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Windows 8.1 | |
| Microsoft | Microsoft Windows Server 2019 | |
| Microsoft | Microsoft Windows Server 2016 | |
| Microsoft | Microsoft Windows Server 2012 R2 | |
| Microsoft | Microsoft Windows Server 2008 SP2 | |
| Microsoft | Microsoft Windows Server | |
| Microsoft | Microsoft Windows Azure Stack | |
| Microsoft | Microsoft Windows 7 | |
| Microsoft | Microsoft Windows Server 2008 R2 SP1 | |
| Microsoft | Microsoft Windows 10 | |
| Microsoft | Microsoft Windows RT 8.1 | |
| Microsoft | Microsoft Windows Server 2012 |
Exploit Intelligence
- https://www.cisa.gov/news-events/alerts/2023/04/07/cisa-adds-five-known-exploited-vulnerabilities-catalog (certbund)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
- TOOLKIT_Redteam_Tools_by_GUID.yara (github-yara)
…and 6 more exploits
Timeline
- Nov 12, 2019 CVE Published
- Jan 10, 2021 PoC Published
- Apr 14, 2021 EPSS Score
- Jun 22, 2021 PoC Published
- Jun 23, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2019/wid-sec-w-2023-0884.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0884 advisory
- https://www.cisa.gov/news-events/alerts/2023/04/07/cisa-adds-five-known-exploited-vulnerabilities-catalog exploit
- https://portal.msrc.microsoft.com/de-de/security-guidance advisory
- http://www.hitachi.co.jp/products/it/storage-solutions/global/sec_info/2019/11.html advisory