PT-2020-17248 · Microsoft · Windows Logon

Published 2020-10-14 · Updated 2022-09-20 · CVE-2020-3427

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Logon versions prior to 4.1.2

Description The issue allows an attacker with local user privileges to manipulate the installer into writing to arbitrary privileged directories by not properly validating file installation paths. This can lead to Denial of Service (DoS) by deleting files or potentially achieving elevation of privileges by replacing system files. The exploitation is only possible during new installations while the installer is running.

Recommendations For versions prior to 4.1.2, update to version 4.1.2 to resolve the issue.

Fix

Weakness Enumeration

CWE-280

Related Identifiers

CVE-2020-3427

Affected Products

Windows Logon

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-3427 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3427 · Vendor Advisory
• https://duo.com/docs/rdp-notes · Vendor Advisory