IMPORTANT:
An old bug was dicovered in the Microsot DNS Server components, update your DNS server asap!!
SIGRed (CVE-2020-1350) is a wormable, critical vulnerability (CVSS base score of 10.0) in the Windows DNS server that affects Windows Server versions 2003 to 2019, and can be triggered by a malicious DNS response. As the service is running in elevated privileges (SYSTEM), if exploited successfully, an attacker is granted Domain Administrator rights, effectively compromising the entire corporate infrastructure.
Read the article from Checkpoint here:
Link to:
CVE-2020-1350 | Windows DNS Server Remote Code Execution Vulnerability
Related Posts
Reported Zero-day Vulnerabilities in Microsoft Exchange Server 2013, 2016, and 2019- New Windows 10 vulnerability allows anyone to get admin privileges
- PrintNightmare: Clarified Guidance for CVE-2021-34527 Windows Print Spooler Vulnerability
- PrintNightmare: Out-of-band updates ready – patch now!
- Exploit: PrintNightmare
- PATCH NOW: April 2021 Exchange Server Security Updates
The mistake should really not be underestimated….