Vulnerability CVE-2020-1113 - CERT Civis.Net

Vulnerability Name:

CVE-2020-1113 (CCN-181048)

Assigned:

2019-11-04

Published:

2020-05-12

Updated:

2020-09-28

Summary:

A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'.

CVSS v3 Severity:

7.5 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.5 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Adjacent Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

6.8 Medium (CCN CVSS v2 Vector: AV:A/AC:H/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Adjacent_Network Access Complexity (AC): High Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2020-1113

Source: XF
Type: UNKNOWN
ms-windows-cve20201113-sec-bypass(181048)

Source: CCN
Type: Packet Storm Security [05-15-2020]
Microsoft Windows Task Scheduler Security Feature Bypass

Source: CCN
Type: Microsoft Security TechCenter - May 2020
Windows Task Scheduler Security Feature Bypass Vulnerability

Source: MISC
Type: Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1113

Vulnerable Configuration:

Configuration 1:

cpe:/o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*

OR cpe:/o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*

OR cpe:/o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*

OR cpe:/o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*

OR cpe:/o:microsoft:windows_10:1709:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_10:1803:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_10:1809:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_10:1903:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_10:1909:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*

OR cpe:/o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*

OR cpe:/o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*

OR cpe:/o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x64:*

OR cpe:/o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x32:*

OR cpe:/o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*

OR cpe:/o:microsoft:windows_server_2019:1903:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2019:1909:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x32:*

OR cpe:/o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x64:*

OR cpe:/o:microsoft:windows_server_2008:*:sp2:*:*:*:*:itanium:*

OR cpe:/o:microsoft:windows_7:-:sp1:-:*:-:-:x32:*

OR cpe:/o:microsoft:windows_7::sp1:x64:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*

OR cpe:/o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*

OR cpe:/o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_8.1:-:-:-:*:-:-:x32:*

OR cpe:/o:microsoft:windows_8.1:::~~~~x64~:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_10:-:*:*:*:*:*:x32:*

OR cpe:/o:microsoft:windows_10:::~~~~x64~:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_server:1803:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_10:-:*:*:*:*:*:arm64:*

OR cpe:/o:microsoft:windows_server:1903:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_server:1909:*:*:*:*:*:*:*

Denotes that component is vulnerable