Title

Multiple Vulnerabilities in Microsoft Web Proxy Auto Discovery (WPAD) (MS16-077) (Cat I impact)

Discussion

Microsoft has released a security bulletin addressing multiple vulnerabilities in Windows Web Proxy Auto Discovery (WPAD). Microsoft Windows Web Proxy Auto Discovery (WPAD) is a method used by clients to locate a URL of a configuration file using DHCP and/or DNS discovery methods. To exploit these vulnerabilities, an attacker would respond to NetBIOS name requests for WPAD. If successfully exploited, an attacker could bypass security restrictions and gain elevated privileges on a targeted system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-69095

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.