Lucene search

K
huaweiHuawei TechnologiesHUAWEI-SA-20200909-01-WINDOWS
HistorySep 09, 2020 - 12:00 a.m.

Security Advisory - Privilege Elevation Vulnerability in Microsoft Windows Kerberos Key Distribution Center

2020-09-0900:00:00
Huawei Technologies
www.huawei.com
124

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.972 High

EPSS

Percentile

99.8%

Microsoft released a security bulletin MS14-068 to publicly disclose a vulnerability in in Kerberos Key Distribution Center (KDC). The vulnerability could allow an attacker to elevate unprivileged domain user account privileges to those of the domain administrator account. (Vulnerability ID: HWPSIRT-2017-05164)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-6324.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200909-01-windows-en

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.972 High

EPSS

Percentile

99.8%