NetSight
medium5.9

CVE-2019-1166

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) p…

Impact

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windows NTLM Tampering Vulnerability'.

Affected products

VendorProductAffected versions
MicrosoftWindows 10
All versions
Versions 1607, 1703, 1709, 1803, 1809
MicrosoftWindows 7
All versions
MicrosoftWindows 8.1
All versions
MicrosoftWindows Rt 8.1
All versions
MicrosoftWindows Server 2008
All versions
Version r2
MicrosoftWindows Server 2012
All versions
Version r2
MicrosoftWindows Server 2016
All versions
Versions 1803, 1903
MicrosoftWindows Server 2019
All versions

Weakness classification

References