CVE-2002-2028
No fix known EPSS 2%
The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing.
Products: microsoft windows_2000, microsoft windows_nt, microsoft windows_xp