PT-2020-2344 · Microsoft · Windows Task Scheduler+1

Published 2020-05-12 · Updated 2020-09-28 · CVE-2020-1113

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Task Scheduler (affected versions not specified)

Description A security feature bypass issue exists in the Windows Task Scheduler service, related to its failure to properly verify client connections over RPC. This can allow a remote attacker to bypass security features, potentially leading to privilege escalation or the execution of arbitrary code. The issue is related to the relaying of NTLM authentication over RPC.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-254

CWE-295

Related Identifiers

BDU:2020-02312

CVE-2020-1113

Affected Products

Windows

Windows Task Scheduler

References · 10

• https://bdu.fstec.ru/vul/2020-02312 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1113 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-1113 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-1113 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1113 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1113 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/1124 · Telegram Post
• https://t.me/hybgl/214 · Telegram Post
• https://t.me/club1337/72 · Telegram Post
• https://t.me/defcon_news/47137 · Telegram Post