article thumbnail

Microsoft’s January 2023 Patch Tuesday Addresses 98 CVEs (CVE-2023-21674)

Tenable

Windows Authentication Methods. CVE-2023-21674 is an EoP vulnerability in Windows operating systems that received a CVSSv3 score of 8.8 ALPC is a message passing utility in Windows operating systems. CVE-2023-21730 is an EoP in Windows operating systems that received a CVSSv3 score of 7.8.

Windows 99
article thumbnail

Microsoft’s October 2023 Patch Tuesday Addresses 103 CVEs (CVE-2023-36563, CVE-2023-41763)

Tenable

Alternatively, an attacker could execute a specially crafted application to exploit the flaw after gaining access to a vulnerable system. Successful exploitation could lead to the disclosure of New Technology LAN Manager (NTLM) hashes. Details about this flaw are included in our analysis below. and rated critical.

Windows 115
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Microsoft’s August 2023 Patch Tuesday Addresses 73 CVEs (CVE-2023-38180)

Tenable

Critical CVE-2023-35385, CVE-2023-36910 and CVE-2023-36911 | Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385 , CVE-2023-36910 and CVE-2023-36911 are RCE vulnerabilities in the Microsoft Message Queuing (MSMQ) component of Windows operating systems that were each given a CVSSv3 score of 9.8

Windows 98
article thumbnail

What Is Remote Access and How Does It Work?

Kaseya

Another common way to provide remote access is via remote desktop protocol (RDP), a proprietary protocol developed by Microsoft that works with Mac operating systems as well. It can authenticate loop connections, encrypt transmissions and compress data.

article thumbnail

Network Troubleshooting in Depth: A Complete Guide

Kentik

Run commands based on your device’s network operating system to see some of the configuration. You can take a look at system logs that the device has kept for any routing or forwarding errors. This information can be found in logs of AAA (Authentication, Authorization, and Accounting) events from your devices.

Network 114
article thumbnail

Behind the Scenes: How We Picked 2021’s Top Vulnerabilities – and What We Left Out

Tenable

Pulse Connect Secure authentication bypass. Somewhat unique on this list is PetitPotam, which is a new technology LAN manager (NTLM) relay attack rather than a distinct vulnerability. Originally disclosed by Gilles Lionel, PetitPotam can force domain controllers to authenticate to an attacker-controlled destination. Description.

Windows 143