Servers and applications
CVE-2020-1472
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially crafted application on a device on the network. To exploit the vulnerability, an unauthenticated attacker would be required…
Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 3 Nov 2021.
- Severity
- Medium 5.5
- Published
- 17 Aug 2020
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 4.10.18, 4.11.13, 4.12.7
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
SambaServers and applications · cpe:a:samba:samba |
|
Known exploited
- CISA name
- Microsoft Netlogon Privilege Escalation Vulnerability
- Required action
- Apply updates per vendor instructions.
- Due for US agencies
- 3 May 2022
- Used in ransomware
- Yes, known