Full Report
Microsoft has resolved a known issue that caused some Windows Server 2025 domain controllers to become unreachable after a restart and triggered app or service failures. [...]
Analysis Summary
# Vulnerability: Unreachable Windows Server Domain Controllers Following Updates
## CVE Details
- CVE ID: Not explicitly provided in the summary text for the primary issue.
- CVSS Score: Not explicitly provided in the summary text.
- CWE: Not explicitly provided in the summary text.
## Affected Systems
- Products: Windows Server (Domain Controllers)
- Versions: Implied to be affected following previous updates that introduced this behavior (prior to the June 2025 Patch Tuesday fix).
- Configurations: Domain Controllers running Windows Server systems.
## Vulnerability Description
Microsoft released fixes addressing an issue where domain controllers could become unreachable, likely following previous updates (implied to be related to authentication/network services). The issue manifests such that affected domain controllers require manual intervention on the network adapter after every reboot until the specific fix is applied.
## Exploitation
- Status: Not detailed if this specific issue was actively exploited, but it is related to a recent June 2025 Patch Tuesday which fixed other severity flaws.
- Complexity: Not explicitly detailed, but the impact is a service outage (unreachable DC).
- Attack Vector: System disruption / Post-patch state failure.
## Impact
- Confidentiality: Not specified (Likely Low/None, concerning availability/reachability).
- Integrity: Not specified.
- Availability: High (Domain Controllers become unreachable, impacting domain trust/functionality).
## Remediation
### Patches
- **KB5060842**: This update contains the permanent fix for Domain Controllers becoming unreachable after a reboot.
### Workarounds
1. Manually restart the network adapter on impacted servers using the PowerShell command: `Restart-NetAdapter *`.
2. **Note:** This workaround must be performed after *every* reboot until the KB5060842 update is installed, as the known issue triggers automatically upon restart.
## Detection
- **Indicators of Compromise:** Domain controllers failing to respond to network traffic or domain queries following a system reboot.
- **Detection methods and tools:** Monitoring network connectivity and health status of Domain Controllers post-reboot.
## References
- Vendor Advisories: Microsoft June 2025 Patch Tuesday Advisory (Reference points to the news article detailing the fix).
- Relevant links - defanged:
- bleepingcomputer com/news/microsoft/microsoft-fixes-unreachable-windows-server-domain-controllers/
- bleepingcomputer com/news/microsoft/microsoft-june-2025-patch-tuesday-fixes-exploited-zero-day-66-flaws/