HC3 TLP White Sector Alert: “Zerologon” Netlogon Remote Protocol Vulnerability

In August, Microsoft released a patch for a vulnerability that is applicable to the healthcare community. CVE-2020-1472, also called Zerologon, was rated critical severity as it allows unauthenticated administrative access to a Windows domain controller (DC) and possible compromise of the entire domain. Applying the Microsoft patch will completely resolve this vulnerability, which HC3 recommends patching of vulnerable systems be prioritized for any healthcare organization.