CVE-2020-1031 — Sensitive Information Exposure in Microsoft Windows 10 Version 1507
4 documents4 sources
Severity
7.5HIGHNVD
EPSS
16.4%
top 5.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 11
Latest updateMay 24
Description
An information disclosure vulnerability exists in the way that the Windows Server DHCP service improperly discloses the contents of its memory.
To exploit the vulnerability, an unauthenticated attacker could send a specially crafted packet to an affected DHCP server. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.
The security update addresses the vulnerability by correcting how DHCP servers initializes memory.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6