CVE-2020-1472: Zerologon
What is Zerologon?
A critical privilege escalation vulnerability in the Netlogon Remote Protocol (MS-NRPC). By exploiting a cryptographic flaw in the AES-CFB8 implementation, attackers can establish a Netlogon session with a domain controller using an all-zero computer credential.
Impact & Exploitation
Enables domain admin compromise in seconds. CVSS 10.0. Exploited by Iranian and Chinese APTs. Full Active Directory takeover from any network position.
How Precogs AI Detects Zerologon
Precogs AI detects weak cryptographic implementations in compiled Windows networking components, identifying Netlogon-style AES-CFB8 flaws in authentication protocols.
Precogs Research
This vulnerability intelligence report was analyzed and enriched by the Precogs AI Security Team. Our researchers continuously monitor emerging threats across AI code, LLM pipelines, and binary architectures to ensure accurate real-time remediation guidance.