Home

ms14-066: vulnerability in schannel could allow remote code execution: november 11, 2014 for Windows Server 2012 R2 (KB2992611)

Risk Information

Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
93.27%

CVE Information

Source CVE
CVE-2014-6321

Associated CVE
CVE-2014-6321

Patch Details

Patch associated with this vulnerability is supported by ManageEngine.

Patch ID
16413

Patch Description
Security Update for Windows Server 2012 R2 (KB2992611)

References

http://blog.beyondtrust.com/triggering-ms14-066
http://marc.info/?l=bugtraq&m=142384364031268&w=2
http://secunia.com/advisories/59800
http://technet.microsoft.com/security/bulletin/MS14-066
http://www.kb.cert.org/vuls/id/505120
http://www.securityfocus.com/bid/70954
http://www.securitysift.com/exploiting-ms14-066-cve-2014-6321-aka-winshock/
http://www.us-cert.gov/ncas/alerts/TA14-318A