CVE-2021-36942—Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

漏洞名称

Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

描述

Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2021-36942

相关新闻文章

• Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July PatchOctober 22, 2025
• Sharepoint ToolShell attacks targeted orgs across four continentsOctober 22, 2025

相关 CWE

• CWE-749