CVE-2022-26925

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

WARNING: This update is required on all Microsoft Windows endpoints but if deployed to domain controllers without additional configuration changes the update breaks PIV/CAC authentication. Read CISA implementation guidance carefully before deploying to domain controllers.; https://nvd.nist.gov/vuln/detail/CVE-2022-26925

Remediation deadline: July 22, 2022

Description

Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.

Timeline

Published:July 1st, 2022 12:00 AM

Last modified:July 1st, 2022 12:00 AM

Added to KEV:July 1st, 2022

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Microsoft

Products

Windows

Weaknesses (CWE)

CWE-306

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute