What does “Exploitation less likely” really mean?

Topic

New Reply

All of Microsoft’s separately identified security holes – CVEs in the parlance – are given an “Exploitability Index” level. Microsoft’s official defin
[See the full post at: What does “Exploitation less likely” really mean?]

Reply | Quote

Replies

Homeland Security issues rare emergency alert over ‘critical’ Windows bug
https://techcrunch.com/2020/09/19/homeland-security-emergency-alert-critical-windows-bug/

Reply | Quote

That’s the Zerologon security hole, which I talked about on Sept 15.

Yes, it’s a problematic bug that’s bound to be exploited pretty soon now. But it only affects servers, and it can only be used by an attacker after they’re already inside your network. And if you’ve been following along and have already installed the August patches, you’re protected.

1 user thanked author for this post.

RTEsysadmin

Reply | Quote

Absolutely. Sysadmins are paying attention to Zerologon.

But I think the point here may be that what Microsoft considers critical and what government cyber warriors think is critical may be two different things. Does “Exploitation less likely” mean that Microsoft thinks it would take more that a script kiddie to use it?

Microsoft’s judgment may be questionable at both ends of the spectrum.

Group K(ill me now)

1 user thanked author for this post.

woody

Reply | Quote