Discover and read the best of Twitter Threads about #kb5004945
Most recents (1)
The so called #printerbug allowed an attacker to get the NetNTLM hash of the affected server. Depending on the computer account privileges, this could lead to full domain compromise: dionach.com/blog/printer-s…
1/6
1/6
By design, some systems need to have local administrator privileges to the other, like on the Exchange Trusted Subsystem group. No SMB signing + printerbug + ntlmrelayx = Exchange server compromise, which basically means a full compromise due to exchange group privileges.
2/6
2/6
