KNOWN EXPLOITED VULNERABILITY
CISA KEV 处置信息
已确认在野利用
- 加入 KEV
- 2022/07/01
- 整改期限
- 2022/07/22已逾期 1551 天
- CISA 厂商
- Microsoft
- CISA 产品
- Windows
要求采取的措施
Apply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].
CISA 说明
WARNING: This update is required on all Microsoft Windows endpoints but if deployed to domain controllers without additional configuration changes the update breaks PIV/CAC authentication. Read CISA implementation guidance carefully before deploying to domain controllers.; https://nvd.nist.gov/vuln/detail/CVE-2022-26925
漏洞描述
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.
影响产品
暂无结构化产品信息。
修复建议
Apply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].