Windows NTLM Spoofing Vulnerability
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Windows 10 Version 1607 | affected |
|
||||||
| Microsoft | Windows 11 version 22H2 | affected |
|
||||||
| Microsoft | Windows Server 2012 | affected |
|
||||||
| Microsoft | Windows Server 2012 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows Server 2012 R2 | affected |
|
||||||
| Microsoft | Windows Server 2012 R2 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows Server 2016 | affected |
|
||||||
| Microsoft | Windows Server 2016 (Server Core installation) | affected |
|
||||||
| Microsoft | Windows Server 2022 | affected |
|
||||||
| Microsoft | Windows Server version 2004 | affected |
|
Configuration 1 [-]
|
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Windows 10 1607 |
|
||||||||
| Microsoft | Windows 11 22h2 |
|
||||||||
| Microsoft | Windows Server 2004 |
|
||||||||
| Microsoft | Windows Server 2012 |
|
||||||||
| Microsoft | Windows Server 2012 (server Core Installation) |
|
||||||||
| Microsoft | Windows Server 2012 R2 |
|
||||||||
| Microsoft | Windows Server 2012 R2 (server Core Installation) |
|
||||||||
| Microsoft | Windows Server 2016 |
|
||||||||
| Microsoft | Windows Server 2016 (server Core Installation) |
|
||||||||
| Microsoft | Windows Server 2022 |
|
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: 11.4% (11.441% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microsoft windows 11 22h2
Microsoft windows Server 2012 (server Core Installation) Microsoft windows Server 2012 R2 Microsoft windows Server 2012 R2 (server Core Installation) Microsoft windows Server 2016 (server Core Installation) |
|
| Vendors & Products |
Microsoft windows 11 22h2
Microsoft windows Server 2012 (server Core Installation) Microsoft windows Server 2012 R2 Microsoft windows Server 2012 R2 (server Core Installation) Microsoft windows Server 2016 (server Core Installation) |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. | |
| Title | Windows NTLM Spoofing Vulnerability | |
| First Time appeared |
Microsoft
Microsoft windows 10 1607 Microsoft windows 11 22h2 Microsoft windows Server 2004 Microsoft windows Server 2012 Microsoft windows Server 2012 R2 Microsoft windows Server 2016 Microsoft windows Server 2022 |
|
| Weaknesses | CWE-200 | |
| CPEs | cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_11_22H2:*:*:*:*:*:*:arm64:* cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Microsoft
Microsoft windows 10 1607 Microsoft windows 11 22h2 Microsoft windows Server 2004 Microsoft windows Server 2012 Microsoft windows Server 2012 R2 Microsoft windows Server 2016 Microsoft windows Server 2022 |
|
| References |
| |
| Metrics |
cvssV3_1
|