PT-2020-3038 · Secdo · Secdo For Windows

Eviatar Gerzi · Published 2020-04-08 · Updated 2020-04-10 · CVE-2020-1986

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Secdo for Windows (affected versions not specified)

Description The issue is related to improper input validation, allowing an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:) to cause a system crash on every login. This can be exploited by an attacker to add data to the root directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-03302

CVE-2020-1986

Affected Products

Secdo For Windows

References · 3

• https://security.paloaltonetworks.com/CVE-2020-1986 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1986 · Security Note
• https://bdu.fstec.ru/vul/2020-03302 · Security Note