OS-WINDOWS Microsoft Windows Netlogon DCERPC over SMB NetrServerAuthenticate failed elevation of privilege attempt

IPS-CFW

1 SID: 57279

Description

Detects an attempt to exploit CVE-2020-1472, a privilege escalation flaw that can grant higher access in Microsoft Windows Netlogon DCERPC over SMB NetrServerAuthenticate failed.

CVEs

CVE-2020-1472

Related malware families

CVE-2020-1472 Microsoft

References

portal.msrc.microsoft.com