CVE-2017-8563
HighSummary
A vulnerability in Microsoft Windows allows for elevation of privilege due to Kerberos falling back to NT LAN Manager (NTLM) Authentication Protocol as the default authentication protocol.
Risk Assessment
The organization may be exposed to unauthorized access to systems, potentially leading to serious security breaches.
Recommendation
It is recommended to update operating systems to the latest versions and configure Kerberos as the default authentication protocol.
Other vulnerabilities in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016
See all- CVE-2017-8495High
A vulnerability in Windows systems allows an attacker to bypass Extended Protection for Authentication when Kerberos fails to prevent tampering with the SNAME field during ticket exchange. This is known as 'Kerberos SNAME Security Feature Bypass'.
- CVE-2017-0294High
A vulnerability in Microsoft Windows allows an attacker to execute remote code when the system fails to properly handle cabinet files. This affects multiple versions of Windows, including Windows 7, 8.1, 10, and Windows Server.
Original NVD description (English source)
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Kerberos falling back to NT LAN Manager (NTLM) Authentication Protocol as the default authentication protocol, aka "Windows Elevation of Privilege Vulnerability".