← back | CVE Intelligence

CVE-2020-1472

Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2020-1472.

Coverage Span: 2020-09-21 → 2024-11-15
Reports: 2 related reports

Associated Reports & Timeline

Zerologon (CVE-2020-1472) exploits Netlogon to bypass authentication and reset a domain controller's machine account password, granting full domain control. Detection: Event ID 4742.

Takeaways from Zerologon: The Latest Domain Controller Attack

Takeaways from Zerologon (CVE-2020-1472): the Netlogon flaw let unauthenticated attackers reset a domain controller's password and seize domain admin rights—CVSS 10, exploits circulating—plus CISA's patch order and Microsoft's two-phase fix.