5.5

CVE-2020-1420

EPSS 1.23%
Veröffentlicht 14.07.2020 23:15:17
Zuletzt bearbeitet 21.11.2024 05:10:28
Erkennungen
Login

An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Information Disclosure Vulnerability'.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

NVD 27 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows 10 Version - HwPlatform x64

Microsoft ≫ Windows 10 Version - HwPlatform x86

Microsoft ≫ Windows 10 Version 1607 HwPlatform x64

Microsoft ≫ Windows 10 Version 1607 HwPlatform x86

Microsoft ≫ Windows 10 Version 1709 HwPlatform arm64

Microsoft ≫ Windows 10 Version 1709 HwPlatform x64

Microsoft ≫ Windows 10 Version 1709 HwPlatform x86

Microsoft ≫ Windows 10 Version 1803 HwPlatform arm64

Microsoft ≫ Windows 10 Version 1803 HwPlatform x64

Microsoft ≫ Windows 10 Version 1803 HwPlatform x86

Microsoft ≫ Windows 10 Version 1809 HwPlatform arm64

Microsoft ≫ Windows 10 Version 1809 HwPlatform x64

Microsoft ≫ Windows 10 Version 1809 HwPlatform x86

Microsoft ≫ Windows 10 Version 1903 HwPlatform arm64

Microsoft ≫ Windows 10 Version 1903 HwPlatform x64

Microsoft ≫ Windows 10 Version 1903 HwPlatform x86

Microsoft ≫ Windows 10 Version 1909 HwPlatform arm64

Microsoft ≫ Windows 10 Version 1909 HwPlatform x64

Microsoft ≫ Windows 10 Version 1909 HwPlatform x86

Microsoft ≫ Windows 10 Version 2004 HwPlatform arm64

Microsoft ≫ Windows 10 Version 2004 HwPlatform x64

Microsoft ≫ Windows 10 Version 2004 HwPlatform x86

Microsoft ≫ Windows Server 2016 Version -

Microsoft ≫ Windows Server 2016 Version 1903

Microsoft ≫ Windows Server 2016 Version 1909

Microsoft ≫ Windows Server 2016 Version 2004

Microsoft ≫ Windows Server 2019 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.23%	0.649

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NIST	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1420

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-1420

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-1420

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-1420

EUVD