CVE-2020-1113

Опубликовано: 21 мая 2020

Источник: nvd

CVSS3: 7.5

CVSS2: 9.3

EPSS Низкий

Описание

A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'.

Ссылки

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1113
Patch
Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1113
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x86:*

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*

cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*

cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*

cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*

cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2019:1903:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2019:1909:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01115

Низкий

7.5 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-295

Связанные уязвимости

CVE-2020-1113

CVSS3: 5.3

msrc

около 5 лет назад

Windows Task Scheduler Security Feature Bypass Vulnerability

GHSA-8rm2-mc4g-pm72

CVSS3: 7.5

github

около 3 лет назад

BDU:2020-02312

CVSS3: 8.5

fstec