Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-26925

Windows LSA Spoofing Vulnerability
Exploit prediction scoring system (EPSS) score
EPSS Score 0.506
EPSS Ranking 97.7%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 4.3
Proposed Action
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.
Ransomware Campaign
Unknown
Products affected by CVE-2022-26925


Contact Us

Shodan ® - All rights reserved