Tenable
SEPTEMBER 12, 2023
Successful exploitation of this flaw would allow for the disclosure of New Technology LAN Manager (NTLM) hashes. Successful exploitation of these vulnerabilities requires an attacker to authenticate with LAN-access and have valid credentials for an Exchange user. Each of these vulnerabilities were given CVSSv3 scores of 8.0
Tenable
FEBRUARY 13, 2024
Successful exploitation of this flaw would allow an attacker to relay a New Technology LAN Manager Version 2 (NTLMv2) hash against a vulnerable server. In order to exploit this flaw, an attacker would need to be authenticated with LAN-access and have a valid login for an Exchange user.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Tenable
AUGUST 8, 2023
NET and Visual Studio Denial of Service Vulnerability CVE-2023-38180 is a Denial of Service (DoS) vulnerability in Microsoft Visual Studio,NET versions 6.0 According to the advisories, exploitation of these vulnerabilities would allow an authenticated attacker to execute code using a PowerShell remoting session.
Tenable
JANUARY 10, 2023
This month’s update includes patches for: NET Core. Windows Authentication Methods. and could grant an authenticated attacker SYSTEM privileges. Successful exploitation could lead to disclosure of New Technology LAN Manager (NTLM) hashes and NTLM relay attacks. 11 Critical. 87 Important. 0 Moderate. 3D Builder.
Tenable
MAY 10, 2022
This month’s update includes patches for: NET and Visual Studio. Windows Authentication Methods. However, when chained with a new technology LAN manager (NTLM) relay attack, the combined CVSSv3 score for the attack chain is 9.8. Microsoft Exchange Server. Microsoft Graphics Component. Microsoft Office. Microsoft Office Excel.
Tenable
AUGUST 10, 2021
This month’s update includes patches for: NET Core & Visual Studio. CVE-2021-36942 is a spoofing vulnerability in Windows Local Security Authority (LSA) which could allow an unauthenticated attacker using New Technology LAN Manager (NTLM) to trick a domain controller into authenticating with another server. Azure Sphere.
Expert insights. Personalized for you.
119 
Let's personalize your content