Netskope Threat Labs

OS-WINDOWS Microsoft Windows NetrServerReqChallenge RPC transport sign and seal disabling attempt

IPS-CFW

4 SIDs: 55802, 200081, 200082, 200083

First seen
October 2024
Last seen
January 2026

Detects an attempt to exploit CVE-2020-1472 and CVE-2025-33070, a known vulnerability that can compromise the target in Microsoft Windows NetrServerReqChallenge RPC transport sign and seal disabling.