---
id: 6019
title: "[CVE-2020-1472] Takeaways from Zerologon: The Latest Domain Controller Attack"
cve: CVE-2020-1472
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/takeaways-from-zerologon-the-latest-domain-controller-attack/"
published_at: "2020-09-21T19:34:10Z"
tags: ["cisa", "patching", "domain-controller", "zerologon", "cve-2020-1472", "netlogon"]
phying_url: "https://phying.com/item/6019"
lang: en
---

# [CVE-2020-1472] Takeaways from Zerologon: The Latest Domain Controller Attack

## Summary

Takeaways from Zerologon (CVE-2020-1472): the Netlogon flaw let unauthenticated attackers reset a domain controller's password and seize domain admin rights—CVSS 10, exploits circulating—plus CISA's patch order and Microsoft's two-phase fix.

## Intelligence Metadata

- **Sources:** semperis.com
- **CVE:** CVE-2020-1472
- **Published:** 2020-09-21T19:34:10Z
- **Original:** https://www.semperis.com/blog/takeaways-from-zerologon-the-latest-domain-controller-attack/
- **Phying News:** https://phying.com/item/6019