CVE-2016-2111

CVE-2016-2111, known as "Badlock," is a critical vulnerability affecting the NETLOGON service in Samba versions 3.x, 4.x, 4.2.x, 4.3.x, and 4.4.x when configured as a domain controller. This flaw allows remote attackers to spoof a computer's name in a secure channel, enabling them to intercept sensitive session data. The vulnerability carries a CVSS v3 score of 6.3 (Medium), indicating a local attack vector with high attack complexity, requiring user interaction. Successful exploitation could lead to high confidentiality and integrity impacts, as attackers can obtain and potentially manipulate sensitive information. Despite its potential impact, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. While it garnered some community discussion and media coverage upon disclosure, its EPSS score is low, suggesting a low likelihood of exploitation.