Title

Microsoft Windows RPC Downgrade Vulnerability (MS16-047) (Cat I impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability affecting Microsoft Windows. To exploit this vulnerability, an attacker launch a man-in-the-middle (MiTM) attack, force a downgrade of the authentication level of the SAM and LSAD channels, and then impersonate an authenticated user. If successfully exploited, this vulnerability would allow an attacker to gain access to the SAM database.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-68361

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.