CVE-2016-0128

Description

The SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 do not properly establish an RPC channel, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka Windows SAM and LSAD Downgrade Vulnerability or BADLOCK.

Risk Information

Base Score
6.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS Score
Exploitation Probability
60.274

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Edge Elevation of Privilege Vulnerability for Windows 10 for x64-based Systems (KB3147461) - CumulativeWindows
Windows SAM and LSAD Downgrade Vulnerability for Windows Server 2008 x64 Edition (KB3149090)Windows
Windows SAM and LSAD Downgrade Vulnerability for Windows Server 2008 (KB3149090)Windows
Windows SAM and LSAD Downgrade Vulnerability for Windows Vista for x64-based Systems (KB3149090)Windows
Windows SAM and LSAD Downgrade Vulnerability for Windows Vista (KB3149090)Windows
Windows SAM and LSAD Downgrade Vulnerability for Windows 7 for x64-based Systems (KB3149090)Windows
Windows SAM and LSAD Downgrade Vulnerability for Windows 7 (KB3149090)Windows
Windows SAM and LSAD Downgrade Vulnerability for Windows Server 2008 R2 x64 Edition (KB3149090)Windows
Windows SAM and LSAD Downgrade Vulnerability for Windows Server 2012 (KB3149090)Windows
Windows SAM and LSAD Downgrade Vulnerability for Windows Server 2012 R2 (KB3149090)Windows
Windows SAM and LSAD Downgrade Vulnerability for Windows 8.1 for x64-based Systems (KB3149090)Windows
Windows SAM and LSAD Downgrade Vulnerability for Windows 8.1 (KB3149090)Windows
Microsoft Edge Elevation of Privilege Vulnerability for Windows 10 Version 1511 for x64-based Systems (KB3147458) - CumulativeWindows
Microsoft Edge Elevation of Privilege Vulnerability for Windows 10 Version 1511 (KB3147458) - CumulativeWindows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-20358Cumulative Update for Windows 10 for x64-based Systems (KB3147461)
PATCH-20461Security Update for Windows Server 2008 x64 Edition (KB3149090)
PATCH-20457Security Update for Windows Server 2008 (KB3149090)
PATCH-20460Security Update for Windows Vista for x64-based Systems (KB3149090)
PATCH-20456Security Update for Windows Vista (KB3149090)
PATCH-20462Security Update for Windows 7 for x64-based Systems (KB3149090)
PATCH-20458Security Update for Windows 7 (KB3149090)
PATCH-20463Security Update for Windows Server 2008 R2 x64 Edition (KB3149090)
PATCH-20464Security Update for Windows Server 2012 (KB3149090)
PATCH-20466Security Update for Windows Server 2012 R2 (KB3149090)
PATCH-20465Security Update for Windows 8.1 for x64-based Systems (KB3149090)
PATCH-20459Security Update for Windows 8.1 (KB3149090)
PATCH-20360Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB3147458)
PATCH-20359Cumulative Update for Windows 10 Version 1511 (KB3147458)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234