CVE-2020-1030 — Improper Privilege Management in Microsoft Windows 10 Version 1507

CWE-269 — Improper Privilege ManagementCWE-346 — Origin Validation Error7 documents7 sources
Severity
7.8HIGHNVD
EPSS
1.5%
top 18.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
23
Microsoft Windows 10 Version 1507Microsoft Windows 10 Version 1607Microsoft Windows 10 Version 1709+20 more
Timeline
PublishedSep 11
Latest updateMay 24

Description

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted script or a…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages23 packages

▶CVEListV5microsoft/windows_7_service_pack_16.1.0 — publication

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-cgcm-v3m9-cvv2: An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Win↗2022-05-24
▶
CVEList
Windows Print Spooler Elevation of Privilege Vulnerability↗2020-09-11
▶

🔍Detection Rules

1
Elastic
Suspicious Print Spooler Point and Print DLL↗
▶

📋Vendor Advisories

2
Red Hat
kernel: accepting fragmented plaintext frames in protected networks↗2021-05-11
▶
Microsoft
Windows Print Spooler Elevation of Privilege Vulnerability↗2020-09-08
▶

💬Community

1
Bugzilla
CVE-2020-6098 freeDiameter: specially crafted Diameter request leads to DoS↗2020-07-30
▶
CVE-2020-1030 — Improper Privilege Management | cvebase