PT-2020-3839 · Microsoft · Windows Remote Access+1

Published 2020-08-11 · Updated 2024-01-19 · CVE-2020-1537

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Windows Remote Access (affected versions not specified)

Description: The issue is related to an elevation of privilege vulnerability in the Windows Remote Access service, which improperly handles file operations. This could allow an attacker to gain elevated privileges by running a specially crafted application, but first, they would need code execution on a victim system. The vulnerability is also described as a buffer overflow issue in memory.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2020-04201

CVE-2020-1537

Affected Products

Windows

Windows Remote Access

References · 8

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1537 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04201 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1537 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-1537 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-1537 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1537 · Vendor Advisory
• https://t.me/ckure/5312 · Telegram Post
• https://t.me/thehackernews/811 · Telegram Post