CVE-2015-2374

no score yetEPSS 4.9%

The Netlogon service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly implement domain-controller communication, which allows remote attackers to discover credentials by leveraging certain PDC access and spoofing the BDC role in a PDC communication channel, aka "Elevation of Privilege Vulnerability in Netlogon."

EPSS: 4.9% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2015-07-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_2003_server
microsoft:windows_server_2008
microsoft:windows_server_2012

References

http://www.securityfocus.com/bid/75633
http://www.securitytracker.com/id/1032900
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-071
http://www.securityfocus.com/bid/75633
http://www.securitytracker.com/id/1032900

Check your stack JSON