What is the CVSS score of CVE-2015-0009?

CVE-2015-0009 has a CVSS 2.0 base score of 3.3 (Low). CVSS vector: AV:A/AC:L/Au:N/C:N/I:P/A:N. EPSS exploitation probability: 4.1%.

Is there a public PoC exploit available for CVE-2015-0009?

Yes, a public proof-of-concept exploit is available for CVE-2015-0009. Prioritise patching immediately. EPSS: 4.1%.

Is there a patch available for CVE-2015-0009?

Yes, a patch is available for CVE-2015-0009. Update the affected software to the latest version immediately.

Windows Server 2008 CVE-2015-0009

LOW

7PK - Security Features (CWE-254)

2015-02-11 secure@microsoft.com

Authentication Bypass Microsoft Windows Server 2008 Windows Server 2012 Windows 7 Windows 8 1 Windows Rt 8 1 Windows Server 2003 Windows Vista Windows 8 Windows Rt

3.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

3.3 LOW

AV:A/AC:L/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Adjacent

Attack Complexity

Low

Confidentiality

None

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Feb 11, 2015 - 03:00 cve.org

LOW 3.3

DescriptionCVE.org

The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows man-in-the-middle attackers to disable a signing requirement and trigger a revert-to-default action by spoofing domain-controller responses, aka "Group Policy Security Feature Bypass Vulnerability."

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-254. The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows man-in-the-middle attackers to disable a signing requirement and trigger a revert-to-default action by spoofing domain-controller responses, aka "Group Policy Security Feature Bypass Vulnerability." Affected products include: Microsoft Windows 7, Microsoft Windows 8, Microsoft Windows 8.1, Microsoft Windows Rt, Microsoft Windows Rt 8.1.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.