Microsoft has pushed out the second half of the software patch for the “Zerologon” privilege escalation vulnerability in the Windows Netlogon Remote Protocol more than five months after the first half was issued. The second patch effectively brings all users up to the same level of security. An exploit of the unpatched Zerologon vulnerability would give attackers the ability to move laterally once inside a network, impersonate systems, alter passwords and gain elevation of privilege via the domain controller itself. In October 2020, Microsoft warned the nation-state hacking group it calls Mercury, which has ties to Iran, was exploiting the flaw.”]
Source: https://www.bankinfosecurity.com/microsoft-issues-second-patch-for-netlogon-vulnerability-a-15970