PT-2020-4385 · Microsoft · Network Watcher Agent

Published 2020-10-13 · Updated 2023-12-31 · CVE-2020-16995

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Network Watcher Agent virtual machine extension for Linux (affected versions not specified)

Description: An elevation of privilege issue exists in the Network Watcher Agent virtual machine extension for Linux. This could allow an attacker to execute code with elevated privileges if they are present as a user on the affected virtual machine. The security update addresses this issue by correcting how the Network Watcher Agent virtual machine extension for Linux executes with elevated privileges.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2020-04898

CVE-2020-16995

Affected Products

Network Watcher Agent

References · 7

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16995 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-16995 · Security Note
• https://bdu.fstec.ru/vul/2020-04898 · Security Note
• https://t.me/defcon_news/61331 · Telegram Post
• https://t.me/rnetsec/13740 · Telegram Post
• https://t.me/cybersecuritytechnologies/2085 · Telegram Post
• https://t.me/cibsecurity/15351 · Telegram Post