Skip to content
COOEY

EXPOSURES › CVE-2014-6324

CVE-2014-6324

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-03-25 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2014-6324 ↗
⌖ EXPLOITED IN THE WILD SHAME 85/100 exploited-in-wildunpatchedprivilege-escalation

Microsoft KDC allows remote authenticated users to escalate to domain admin via privilege escalation.

A remote authenticated user can escalate to domain administrator privileges through the Kerberos Key Distribution Center, enabling full domain compromise. DIBs must patch this unpatched vulnerability immediately as it was actively exploited in the wild, representing a severe compliance and operational risk.

Shame score — An unpatched privilege escalation flaw in a core Windows component was actively exploited in the wild, allowing attackers to seize full domain control.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.

AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized