Microsoft · Windows Netlogon · CVE-2024-38124
Name of the Vulnerable Software and Affected Versions:
Windows Netlogon (affected versions not specified)
Description:
The vulnerability in Windows Netlogon is related to deficiencies in the authentication procedure, allowing a remote attacker to elevate their privileges. It involves predicting the name of a new domain controller, which can be easy in some domains, and potentially allows adversaries to escalate to Domain Admin. The issue is critical and can affect the system, with low complexity and no user interaction needed.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary workaround, consider implementing monitoring for any suspicious renaming activities of computers within the network.
Restrict access to sensitive areas of the network to minimize the risk of exploitation.
Avoid using potentially vulnerable authentication procedures until the issue is resolved.