This host is missing an important security update according to Microsoft advisory (2862152).

Successful exploitation will allow an attacker to intercept the target user's network traffic and potentially determine their encrypted domain credentials.

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, https://technet.microsoft.com/en-us/security/advisory/2862152

The flaw is due to improper verification of DirectAccess server connections to DirectAccess clients by DirectAccess.

Microsoft Windows XP x32 Edition Service Pack 3 and prior Microsoft Windows XP x64 Edition Service Pack 2 and prior Microsoft Windows 2003 x32/x64 Edition Service Pack 2 and prior Microsoft Windows Vista Edition Service Pack 1 and prior Microsoft Windows Server 2008 x32/x64 Edition Service Pack 2 and prior Microsoft Windows 7 x32/x64 Edition Service Pack 1 and prior Microsoft Windows Server 2008 R2 x64 Edition Service Pack 1 and prior Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 x32/x64

Get the vulnerable file version and check appropriate patch is applied or not.

• http://www.securityfocus.com/bid/63666
• https://technet.microsoft.com/en-us/security/advisory/2862152

---

Updated on 2017-03-28