CVE-2020-1371

EUVD-2020-12247 · Published Jul 14, 2020

An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Event Logging Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1365.

Technologies

Microsoft Windows 8.1Microsoft Windows 7Microsoft Windows 10Microsoft Windows Server 2019Microsoft Windows Rt 8.1Microsoft Windows Server 2012Microsoft Windows Server 2016Microsoft Windows Server 2008

CVSS scores

v3.17.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
v2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1371

Potentially impacted assets

See if this affects your attack surface