CVE-2020-1430: High severity windows 10 vulnerability

Published Jul 14, 2020

Updated

An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1354.

Affected Software

20 affected components

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows 10=1903

Microsoft Windows 10=1909

Microsoft Windows 10=2004

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1903

Microsoft Windows Server 2016=1909

Microsoft Windows Server 2016=2004

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1430

Event History

Jul 14, 2020

CVE Published

via MITRE·10:54 PM

Data Sourced

via MITRE·10:54 PM

DescriptionWeakness

Frequently Asked Questions

What access does an attacker need before exploiting this vulnerability?

An attacker must first gain execution on the target system and have local access with low privileges. The vulnerability can then be used to elevate privileges, with potential impact to confidentiality, integrity, and availability.

Which Windows products are listed as affected?

The affected products listed are Windows 7, Windows 8.1, Windows 10, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows Server 2016, and Windows Server 2019.

What is the recommended remediation?

A patch is available. Apply the vendor-provided update for CVE-2020-1430 to affected Windows systems.