CVE-2021-42287 is a high-severity vulnerability affecting Active Directory Domain Services on various versions of Microsoft Windows Server. This elevation of privilege vulnerability allows attackers to gain unauthorized access and control over affected systems. Although it has not been publicly disclosed or exploited, it's crucial for organizations to apply the necessary security updates provided by Microsoft to mitigate the risk.

How do I know if I'm affected?

If you're concerned about the vulnerability, it affects Active Directory Domain Services on various versions of Microsoft Windows Server. To know if you're impacted, check if you're using any of these server versions: Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, Windows Server 2008, Windows Server 2016, Windows Server 2019, Windows Server 2022, or Windows Server, version 20H2. This vulnerability allows attackers to gain unauthorized access and control.

What should I do if I'm affected?

If you're affected by the vulnerability, follow these simple steps. First, identify your Windows Server version. Next, visit Microsoft's Security Update Guide to find the appropriate security update for your server. Lastly, download and install the update to protect your system from unauthorized access and control. Stay informed about future updates to maintain security.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

Yes, it is in CISA's Known Exploited Vulnerabilities Catalog. The vulnerability, named Active Directory Domain Services Elevation of Privilege Vulnerability, was added on April 11, 2022, with a due date of May 2, 2022. Organizations should apply the necessary security updates provided by Microsoft to mitigate the risk and protect their systems from unauthorized access and control.

Weakness enumeration

The weakness enumeration for CVE-2021-42287 is CWE-269, which refers to Improper Privilege Management, leading to an elevation of privilege vulnerability in Active Directory Domain Services.

For more details

CVE-2021-42287 is a significant vulnerability affecting Active Directory Domain Services, leading to potential unauthorized access and control. To better understand the vulnerability's description, severity, technical details, and known affected software configurations, refer to the NVD page or the links below.

• NVD - CVE-2021-42287

• Microsoft's Security Update Guide