Tenable
SEPTEMBER 12, 2023
Successful exploitation of this flaw would allow for the disclosure of New Technology LAN Manager (NTLM) hashes. Successful exploitation of these vulnerabilities requires an attacker to authenticate with LAN-access and have valid credentials for an Exchange user. Each of these vulnerabilities were given CVSSv3 scores of 8.0
Tenable
FEBRUARY 13, 2024
Successful exploitation of this flaw would allow an attacker to relay a New Technology LAN Manager Version 2 (NTLMv2) hash against a vulnerable server. In order to exploit this flaw, an attacker would need to be authenticated with LAN-access and have a valid login for an Exchange user.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
CIO
DECEMBER 13, 2022
NTT’s recipe for hybrid working begins with zero trust network architecture, identity management and multifactor authentication. Gone are the days when you used to have lots of fixed LAN cables. Lack of visibility is really one of the key problems that we have encountered.” Finally, there’s the need to consider access technologies.
Tenable
NOVEMBER 17, 2020
As part of his PoC release for CVE-2020-27131, Hauser included a reference to TRA-2017-23 , a vulnerability disclosure from Tenable’s Zero Day Research team from 2017 regarding a deserialization remote code execution vulnerability in Cisco Security Manager and Cisco Prime LAN Management Solution. Proof of concept.
Tenable
AUGUST 8, 2023
According to the advisories, exploitation of these vulnerabilities would allow an authenticated attacker to execute code using a PowerShell remoting session. In order to successfully exploit this flaw, the attacker would first need to have LAN access and valid credentials for an Exchange user. It was assigned a CVSSv3 score of 7.8
Tenable
SEPTEMBER 14, 2020
Security researchers reveal how the cryptographic authentication scheme in Netlogon can be exploited to take control of a Windows domain controller (DC). An attacker can exploit this flaw to impersonate the identity of any machine on a network when attempting to authenticate to the Domain Controller (DC). Background. the maximum score.
CableLabs
AUGUST 31, 2020
They may attack the CPE device from the home network side, or the local area network (LAN) side. These tools are authentication, encryption, and message hashing. Authentication is conducted using a secret of some sort. And they may attack the network operator’s infrastructure. Tapping fiber or coaxial cables are both practical.
Expert insights. Personalized for you.
119 
Let's personalize your content