PT-2020-2700 · Microsoft · Connected User Experiences/Telemetry Service+1

Zhiniang Peng · Published 2020-05-12 · Updated 2021-07-21 · CVE-2020-1123

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Connected User Experiences and Telemetry Service (affected versions not specified)

Description The issue is related to improper handling of file operations by the Connected User Experiences and Telemetry Service, which can lead to a denial of service. This is due to insufficient permission checks for a critical resource. An attacker could exploit this to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

BDU:2020-02773

CVE-2020-1123

Affected Products

Connected User Experiences/Telemetry Service

Windows

References · 6

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-1123 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02773 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1123 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1123 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-1123 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1123 · Vendor Advisory