PT-2021-3785

🗓️ 10 Aug 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 6 Views

Microsoft Windows Local Security Authority vulnerability allows spoofing attacks via RPC usage.

Reporter	Title	Published	Views	Family All 69
GithubExploit	Exploit for CVE-2017-0144	8 Sep 202522:15	–	githubexploit
GithubExploit	Exploit for CVE-2014-6324	26 Oct 202510:52	–	githubexploit
ICS	NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations	5 Oct 202312:00	–	ics
ATTACKERKB	CVE-2021-36942	12 Aug 202100:00	–	attackerkb
Information Security Automation	Security News: Microsoft Patch Tuesday August 2021, Phishers Started Using reCAPTCHA, Scan 1 IP and Go to Jail	19 Aug 202121:38	–	avleonov
Information Security Automation	Microsoft Patch Tuesday May 2022: Edge RCE, PetitPotam LSA Spoofing, bad patches	26 May 202221:21	–	avleonov
Circl	CVE-2021-36942	11 Aug 202104:00	–	circl
CISA KEV Catalog	Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	Microsoft Releases August 2021 Security Updates	10 Aug 202100:00	–	cisa
CNNVD	Microsoft Windows 安全漏洞	10 Aug 202100:00	–	cnnvd

Source	Link
reddit	www.reddit.com/r/KibernetinisSaugumas/comments/1od8cvd/kinijos_gr%C4%97sm%C4%97s_veik%C4%97jai_i%C5%A1naudoja_toolshell
kb	www.kb.cert.org/vuls/id/405600
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-36942
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/668487
t	www.t.me/sysadm_in_channel/3303
msrc	www.msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-36942
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
twitter	www.twitter.com/cyber_megan/status/1981219868621099196
t	www.t.me/cvenotify/87606
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/dcerpc/petitpotam.rb

19 Mar 2026 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 25 - 8.5

CVSS 3.17.5

EPSS0.93727

SSVC

microsoft windows local security authority spoofing issue rpc exploitation efsrpcencryptfilesrv