Remove Authentication Remove SMB Remove Windows
article thumbnail

Microsoft’s November 2024 Patch Tuesday Addresses 87 CVEs (CVE-2024-43451, CVE-2024-49039)

Tenable

Important CVE-2024-43451 | NTLM Hash Disclosure Spoofing Vulnerability CVE-2024-43451 is a NTLM hash spoofing vulnerability in Microsoft Windows. Successful exploitation would lead to the unauthorized disclosure of a user’s NTLMv2 hash, which an attacker could then use to authenticate to the system as the user.

Windows 119
article thumbnail

CVE-2024-8260: SMB Force-Authentication Vulnerability in OPA Could Lead to Credential Leakage

Tenable

Tenable Research discovered an SMB force-authentication vulnerability in Open Policy Agent (OPA) that is now fixed in the latest release of OPA. This exploration led us to discover an SMB force-authentication vulnerability (CVSSv3 6.1) affecting all existing versions of OPA for Windows at that time.

SMB 73
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

It's 2022. Why do you keep using SMB?

Ivanti

During the last 25 years, companies have relied on SMB protocol to allow them to collaborate and centralize corporate documents. The history of SMB (and why it's no longer relevant). The latest iteration, SMB 3.1.1, Windows 10?and?Windows Windows Server 2016. These are the good old shared drives we all know well.

SMB 75
article thumbnail

From Bugs to Breaches: 25 Significant CVEs As MITRE CVE Turns 25

Tenable

CVE-2010-2568: Windows Shell Remote Code Execution Vulnerability Remote Code Execution Exploited Zero-Day Local Stuxnet High 2010 Why it’s significant: Regarded as one of the most sophisticated cyberespionage tools ever created, Stuxnet was designed to target SCADA systems in industrial environments to reportedly sabotage Iran's nuclear program.

article thumbnail

Microsoft’s June 2020 Patch Tuesday Addresses 129 CVEs Including Newly Disclosed SMBv3 Vulnerability (CVE-2020-1206)

Tenable

The updates this month include patches for Microsoft Windows, Microsoft Edge, ChakraCore, Internet Explorer, Microsoft Office, Microsoft Office Services and Web Apps, Windows Defender, Microsoft Dynamics, Visual Studio, Azure DevOps and Adobe Flash Player. CVE-2020-1194 | Windows Registry Denial of Service Vulnerability.

SMB 107
article thumbnail

Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)

Tenable

Critical CVE-2024-43491 | Microsoft Windows Update Remote Code Execution Vulnerability CVE-2024-43491 is a RCE vulnerability in Microsoft Windows Update affecting Optional Components on Windows 10, version 1507 (Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB). Advanced Services ASP.NET 4.6

Windows 121
article thumbnail

5 Ways to Protect Scanning Credentials for Windows Hosts

Tenable

Here, we provide specific guidance for Microsoft Windows systems. When it comes to protecting credentials in a Microsoft Windows Active Directory environment, though, we have specific guidance. When configuring service account(s) for use in credentialed scanning, below are some key considerations unique to Windows hosts.

Windows 61