Cyber Resilience

CVE-2014-6324

Microsoft Windows Server 2008 r2

CISA KEVActive ExploitationEUVD Exploited
Published
18 November 2014
Modified
22 April 2026
KEV Added
25 March 2022
Patch / advisory
View advisory
CVSS Score v3.1 8.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.87 99.7th percentile
Risk Priority 90 floored blend · peak EPSS

Summary

CVE-2014-6324 is a high-severity an unspecified weakness vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 8.8 (High).

Operationally, ranked in the top 0.3% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

The vulnerability is an improper checksum validation flaw in the Kerberos Key Distribution Center (KDC) that permits a forged signature within a Kerberos ticket. It affects the KDC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2, and carries a CVSS 3.1 score of 8.8.

Remote authenticated domain users can exploit the weakness to obtain domain administrator privileges. The issue was observed being exploited in the wild in November 2014.

Public references, including the Microsoft Security Research & Defense blog post, Secunia advisory 62556, SecurityFocus BID 70958, and SecurityTracker 1031237, provide additional technical details and link to the corresponding security updates released by Microsoft.

EU & UK References

Vulnerability Data

The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain…

more

users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka "Kerberos Checksum Vulnerability."

CWE(s)
NVD-CWE-noinfo
KEV Date Added
25 March 2022

Related Threats

CVEs Like This One

CVE-2015-1635Same product: Microsoft Windows 7both on KEV
CVE-2014-1812Same product: Microsoft Windows 7both on KEV
CVE-2014-4148Same product: Microsoft Windows 7both on KEV
CVE-2015-2360Same product: Microsoft Windows 7both on KEV
CVE-2014-6332Same product: Microsoft Windows 7both on KEV
CVE-2014-4113Same product: Microsoft Windows 7both on KEV
CVE-2015-2387Same product: Microsoft Windows 7both on KEV
CVE-2014-4123Same product: Microsoft Windows 7both on KEV
CVE-2013-7331Same product: Microsoft Windows 7both on KEV
CVE-2013-3918Same product: Microsoft Windows 7both on KEV

Affected Assets

microsoft
windows 7
all versions
microsoft
windows 8
all versions
microsoft
windows 8.1
all versions
microsoft
windows server 2003
all versions
microsoft
windows server 2008
all versions, r2
microsoft
windows server 2012
all versions, r2

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References