CVE-2014-6324
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Nov 18, 2014
Updated: Jan 6, 2025
Summary
CVE-2014-6324 is a vulnerability affecting the Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2. This issue allows remote, authenticated domain users to manipulate ticket signatures, enabling them to gain unauthorized domain administrator privileges. Exploitation of this vulnerability, also known as the "Kerberos Checksum Vulnerability," was reported in the wild in November 2014.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
- Microsoft Windows 7
- Microsoft Windows Server 2003
- Microsoft Windows 8.1
- Microsoft Windows Server 2012
Affected Vendors
- Microsoft