Tenable
NOVEMBER 17, 2020
As part of his PoC release for CVE-2020-27131, Hauser included a reference to TRA-2017-23 , a vulnerability disclosure from Tenable’s Zero Day Research team from 2017 regarding a deserialization remote code execution vulnerability in Cisco Security Manager and Cisco Prime LAN Management Solution. Proof of concept.
Tenable
AUGUST 8, 2023
According to the advisories, exploitation of these vulnerabilities would allow an authenticated attacker to execute code using a PowerShell remoting session. In order to successfully exploit this flaw, the attacker would first need to have LAN access and valid credentials for an Exchange user. It was assigned a CVSSv3 score of 7.8
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Tenable
JANUARY 10, 2023
Windows Authentication Methods. and could grant an authenticated attacker SYSTEM privileges. Successful exploitation could lead to disclosure of New Technology LAN Manager (NTLM) hashes and NTLM relay attacks. Microsoft Office SharePoint. Microsoft Office Visio. Microsoft WDAC OLE DB provider for SQL. Visual Studio Code.
Tenable
MAY 10, 2022
Windows Authentication Methods. However, when chained with a new technology LAN manager (NTLM) relay attack, the combined CVSSv3 score for the attack chain is 9.8. An unauthenticated attacker could coerce domain controllers to authenticate to an attacker-controller server using NTLM. Role: Windows Hyper-V. Visual Studio.
CableLabs
AUGUST 31, 2020
They may attack the CPE device from the home network side, or the local area network (LAN) side. You can easily find several examples on the internet of how this is simply done. These tools are authentication, encryption, and message hashing. Authentication is conducted using a secret of some sort.
Tenable
AUGUST 10, 2021
CVE-2021-36942 is a spoofing vulnerability in Windows Local Security Authority (LSA) which could allow an unauthenticated attacker using New Technology LAN Manager (NTLM) to trick a domain controller into authenticating with another server. Note: If your families on the left say Enabled , then all the plugins in that family are set.
Kentik
MARCH 19, 2020
In many infrastructures, the inflection points are at the network edge, where VPN gateways authenticate and encrypt remote-access traffic. This could mean the users are saturating the internet connectivity or that they’ve saturated the LAN (or maybe WAN).
Expert insights. Personalized for you.
100 
Let's personalize your content