CVE Catalog

CVE-2000-0222

High
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
15.05%

96th percentile - higher than 96% of all known CVEs

Summary

The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, allowing remote attackers to connect to the ADMIN$ share without a password until the reboot occurs.

Risk Assessment

The lack of activation of the Administrator password poses a risk of unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to immediately set the Administrator password and reboot the system after installation to minimize the risk.

Original NVD description (English source)

The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS