PT-2025-6320 · Microsoft · Windows

Blaz Satler + 4 · Published 2025-02-11 · Updated 2025-08-01 · CVE-2025-21377

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Windows versions prior to February 2025 patchday

Description: A spoofing issue allows attackers to affect the system. This issue is related to the disclosure of NTLM hash, which can be exploited by attackers. The estimated number of potentially affected devices is not specified. The vulnerability is actively exploited and can allow remote attackers to conduct spoofing attacks and gain unauthorized access to protected information.

Recommendations: As a temporary workaround, consider restricting access to sensitive resources until a patch is available. Apply the February 2025 Windows Updates to resolve the issue.

Fix

Weakness Enumeration

CWE-73

Related Identifiers

BDU:2025-01633

CVE-2025-21377

Affected Products

Windows

References · 22

• https://nvd.nist.gov/vuln/detail/CVE-2025-21377 · Security Note
• https://bdu.fstec.ru/vul/2025-01633 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-21377 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21377 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21377 · Security Note
• https://osv.dev/vulnerability/CVE-2025-21377 · Vendor Advisory
• https://twitter.com/transilienceai/status/1891097675161866497 · Twitter Post
• https://twitter.com/transilienceai/status/1893635027889451107 · Twitter Post
• https://twitter.com/0patch/status/1889669558601986055 · Twitter Post
• https://twitter.com/ET_Labs/status/1889432437903769613 · Twitter Post
• https://twitter.com/transilienceai/status/1890731640168513888 · Twitter Post
• https://twitter.com/transilienceai/status/1891648203008647623 · Twitter Post
• https://t.me/avleonovcom/1508 · Telegram Post
• https://reddit.com/r/Action1/comments/1iop0w1/microsofts_february_patch_tuesday_fixes_63 · Reddit Post
• https://t.me/echeloneyes/3639 · Telegram Post