{"schema":"threatline.record/2","record":{"id":"CVE-2014-1812","aliases":[],"summary":"Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability","details":"Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are configured using Group Policy preferences. An authenticated attacker who successfully exploits the vulnerability could decrypt the passwords and use them to elevate privileges on the domain.","categories":["Operating systems"],"product":"Windows","vendor":"Microsoft","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2014-1812","source_modified_at":"2025-10-22T00:05:37.525Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}],"defaultStatus":null}],"fixed_versions":[],"cvss":8.8,"severity":"High","kev":{"listed":true,"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","ransomware_campaign_use":"Known"},"epss":{"probability":0.65117,"percentile":0.99255,"score_date":"2026-10-23"},"published_at":"2014-05-14T10:00:00.000Z","modified_at":"2025-10-22T00:05:37.525Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2014-1812","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2025-10-22T00:05:37.525Z"},{"source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/smb/smb_enum_gpp.rb","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":null},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2014-1812","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","Metasploit","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1812","source":"CISA KEV"},{"source":"CVE List","url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-025","tags":["vendor-advisory","x_refsource_MS","x_transferred"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-1812","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CISA ADP","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"partial","assessed_at":"2025-02-10T20:45:42.999698Z"},"exploits":[{"source":"Metasploit","kind":"Auxiliary module","name":"SMB Group Policy Preference Saved Passwords Enumeration","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/smb/smb_enum_gpp.rb","date":null,"added":"2025-06-20","check":false}],"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2025-10-22T00:05:37.525Z","content_hash":"3ea7c36baf0bb1b9bd2037949c61edfc591ec349f693432b7108fbc0970007ab"}}