AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2013-3876

HIGH · CVSS 7.1 EPSS 5.22%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-11-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2013-3876
Severity
HIGH
CVSS
7.1
EPSS
5.22%
Microsoft Windows

Original NVD Description

DirectAccess in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly verify server X.509 certificates, which allows man-in-the-middle attackers to spoof servers and read encrypted domain credentials via a crafted certificate.