Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

CVE-2020-1472

🗓️ 17 Aug 2020 19:13:05Reported by microsoftType 
cve
 cve🔗 web.nvd.nist.gov📰️ 18 Media mentions👁 4554 Views🌐 WEB

An elevation of privilege vulnerability in Netlogon Remote Protocol (MS-NRPC)

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
gitee
Gitee		Exploit for CVE-2020-1472
10 Oct 202018:21
–gitee
gitee
Gitee		Exploit for CVE-2020-1472
25 Jul 202116:14
–gitee
gitee
Gitee		Exploit for CVE-2020-1472
8 Oct 202115:47
–gitee
gitee
Gitee		Exploit for CVE-2020-1472
25 Jul 202115:13
–gitee
gitee
Gitee		Exploit for CVE-2020-1472
8 Dec 202016:33
–gitee
gitee
Gitee		Exploit for CVE-2020-1472
7 Jul 202120:29
–gitee
gitee
Gitee		Exploit for CVE-2020-1472
6 Sep 202511:51
–gitee
gitee
Gitee		Exploit for CVE-2020-1472
10 Oct 202018:21
–gitee
gitee
Gitee		Exploit for CVE-2020-1472
8 Dec 202016:32
–gitee
gitee
Gitee		Exploit for CVE-2020-1472
29 Apr 202121:43
–gitee
Rows per page
NVD
Vulners
Node
OR
microsoftwindows_server_1903
microsoftwindows_server_1909
microsoftwindows_server_2004Match-
microsoftwindows_server_2008Matchr2sp1x64
microsoftwindows_server_2012Match-
microsoftwindows_server_2012Matchr2
microsoftwindows_server_2016Match-
microsoftwindows_server_2019Match-
microsoftwindows_server_20h2Match-
Node
OR
fedoraprojectfedoraMatch31
fedoraprojectfedoraMatch32
fedoraprojectfedoraMatch33
Node
OR
opensuseleapMatch15.1
opensuseleapMatch15.2
Node
OR
canonicalubuntu_linuxMatch14.04esm
canonicalubuntu_linuxMatch16.04esm
canonicalubuntu_linuxMatch16.04lts
canonicalubuntu_linuxMatch18.04lts
canonicalubuntu_linuxMatch20.04lts
Node
synologydirectory_serverRange<4.4.5-0101
Node
OR
sambasambaRange<4.10.18
sambasambaRange4.11.0–4.11.13
sambasambaRange4.12.0–4.12.7
Node
debiandebian_linuxMatch9.0
Node
oraclezfs_storage_appliance_kitMatch8.8
[
  {
    "vendor": "Microsoft",
    "product": "Windows Server version 2004",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server, version 1909 (Server Core installation)",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server, version 1903 (Server Core installation)",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016 (Server Core installation)",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 R2 Service Pack 1",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.1.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_server_2008_R2:*:*:*:*:*:*:x64:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 (Server Core installation)",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2 (Server Core installation)",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server version 20H2",
    "cpes": [
      "cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]
SourceLink
usnwww.usn.ubuntu.com/4559-1/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TAPQQZZAT4TG3XVRTAFV2Y3S7OAHFBUP/
packetstormsecuritywww.packetstormsecurity.com/files/159190/Zerologon-Proof-Of-Concept.html
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H4OTFBL6YDVFH2TBJFJIE4FMHPJEEJK3/
listswww.lists.debian.org/debian-lts-announce/2020/11/msg00041.html
packetstormsecuritywww.packetstormsecurity.com/files/160127/Zerologon-Netlogon-Privilege-Escalation.html
usnwww.usn.ubuntu.com/4510-2/
usnwww.usn.ubuntu.com/4510-1/
listswww.lists.opensuse.org/opensuse-security-announce/2020-09/msg00080.html
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ST6X3A2XXYMGD4INR26DQ4FP4QSM753B/
Rows per page
ParameterPositionPathDescriptionCWE
authenticatorpathnetlogon/NetrServerPasswordSet2Netlogon RPC call used to set the machine account password during the Zerologon exploit.
clear_new_passwordpathnetlogon/NetrServerPasswordSet2Netlogon RPC call used to set the machine account password during the Zerologon exploit.
account_namepathnetlogon/NetrServerAuthenticate3Netlogon RPC call to authenticate and establish a secure channel for Zerologon exploitation.
primary_namepathnetlogon/NetrServerAuthenticate3Netlogon RPC call to authenticate and establish a secure channel for Zerologon exploitation.
client_credentialpathnetlogon/NetrServerAuthenticate3Netlogon RPC call to authenticate and establish a secure channel for Zerologon exploitation.
secure_channel_typepathnetlogon/NetrServerAuthenticate3Netlogon RPC call to authenticate and establish a secure channel for Zerologon exploitation.
computer_namepathnetlogon/NetrServerAuthenticate3Netlogon RPC call to authenticate and establish a secure channel for Zerologon exploitation.
flagspathnetlogon/NetrServerAuthenticate3Netlogon RPC call to authenticate and establish a secure channel for Zerologon exploitation.
primary_namepathnetlogon/NetrServerReqChallengeNetlogon RPC call to request a challenge as part of the authentication flow.
computer_namepathnetlogon/NetrServerReqChallengeNetlogon RPC call to request a challenge as part of the authentication flow.
Rows per page

thejournalizer

2026MicrosoftDigitalDefenseReport:credentialtheft,ClickFix,phishingshifts,anda5.3-hourcontainerexploitationwindow

cybersecurity_sol

HiveRansomware→HuntersInternational→WorldLeaksAttackExecutionChains,SystemCompromise&amp;TechnicalFindings

technadu

Berlinrefusestopayextortionistsafterstatenetworkbreach;Rhysidaclaims5.79TBstolen

falconupkid

CriticalWindowsNetlogonRCEflawnowexploitedinattacks

foxtrot_uniform98

Pentesting/pentestersGuideandHelp

Visual_Discussion112

EEKdetection,shouldIbeworried?

On a recent pentest job for a client, i found a DC still vulnerable to Zerologon (CVE-2020-1472), it took around 15 minutes to gain full admin privileges on the domain controller... How hard can it be to patch your systems? click and update!

In a year of headline-making vulnerabilities and incidents, Zerologon (CVE-2020-1472) stands out due to its widespread adoption by threat actors and its checkered disclosure timeline.

In a year of headline-making vulnerabilities and incidents, Zerologon (CVE-2020-1472) stands out due to its widespread adoption by threat actors and its checkered disclosure timeline.

In a year of headline-making vulnerabilities and incidents, Zerologon (CVE-2020-1472) stands out due to its widespread adoption by threat actors and its checkered disclosure timeline.

Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 03:01Current
7.5High risk
Vulners AI Score7.5
CVSS 29.3
CVSS 3.15.5 - 10
EPSS0.99389
SSVC
In Wild
cve-2020-1472netlogonelevation of privilegevulnerabilitynvd
4554