CVE-2023-36425

Windows Distributed File System DFS Remote Code Execution Vulnerability...

CVE-2023-36425

Technical details (affected products, root cause, exploitability, or remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-36425 Windows Distributed File System (DFS) Remote Code Execution Vulnerability

...

CVE-2023-36425 Windows Distributed File System (DFS) Remote Code Execution Vulnerability

...

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

...

CVE-2023-21820

Windows Distributed File System DFS Remote Code Execution Vulnerability...

Remote code execution

Windows Distributed File System DFS Remote Code Execution Vulnerability...

CVE-2023-21820 Windows Distributed File System (DFS) Remote Code Execution Vulnerability

...

CVE-2023-21820

Technical details (affected product/version, root cause, impact, or fix) are not publicly available in the provided documents. Monitor for updates.

CVE-2022-38025

Windows Distributed File System DFS Information Disclosure Vulnerability...

Windows Distributed File System (DFS) Information Disclosure Vulnerability

...

CVE-2022-38025

CVE-2022-38025 corresponds to a Windows DFS Information Disclosure vulnerability. The connected advisory (NCSC) flags DFS as affected with an impact category of Access to sensitive data and a CVSS-like rating around 5.5. Public materials in the Connected set do not provide root-cause or exploit d...

Prepare Your Organization for Compliance with the NYDFS Cybersecurity Regulation

Cyberattacks are on the rise, with bad actors accelerating their nefarious exfiltration of valuable and confidential data from financial institutions, Federal agencies, healthcare organizations, and more. According to an IBM study, the Financial Services industry saw an increase in the cost of da...

CVE-2022-34719

Windows Distributed File System DFS Elevation of Privilege Vulnerability...

Privilege escalation

Windows Distributed File System DFS Elevation of Privilege Vulnerability...

CVE-2022-34719

Technical details about CVE-2022-34719 are not publicly available in the provided connected documents. Monitor for updates from official sources to learn affected products, root cause, and fixes.

Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

...

Metasploit Weekly Wrap-Up

DFSCoerce - Distributing more than just files DFS Distributed File System is now distributing Net-NTLM credentials thanks to Spencer McIntyre with a new auxiliary/scanner/dcerpc/dfscoerce module that is similar to PetitPotam in how it functions. Note that unlike PetitPotam, this technique does...

New NTLM Relay Attack Lets Attackers Take Control Over Windows Domain

A new kind of Windows NTLM relay attack dubbed DFSCoerce has been uncovered that leverages the Distributed File System DFS: Namespace Management Protocol MS-DFSNM to seize control of a domain. "Spooler service disabled, RPC filters installed to prevent PetitPotam and File Server VSS Agent Service...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...