0patching Zerologon (CVE-2020-1472)
This video shows how 0patch blocks a "Zerologon" attack (CVE-2020-1472). The Zerologon test tool is launched against a fully patched Windows Server 2008 R2 without Extended Security Updates (i.e., patched up to January 2020) while 0patch Agent is disabled. The test tool discovers that the server is vulnerable to Zerologon. After enabling 0patch Agent, which applies an in-memory micropatch for CVE-2020-1472 to lsass.exe without having to reboot the system, the Zerologon test tool no longer succeeds. This is how easy it is to use 0patch.