CVE-2020-1511
Last modified
CVE-2020-1511 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service handles file operations.. EPSS estimates a 0.80% chance of exploitation in the next 30 days.
Description
An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service handles file operations.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 10 | All versions |
| Microsoft | Windows 10 | 1607 |
| Microsoft | Windows 10 | 1709 |
| Microsoft | Windows 10 | 1803 |
| Microsoft | Windows 10 | 1809 |
| Microsoft | Windows 10 | 1903 |
| Microsoft | Windows 10 | 1909 |
| Microsoft | Windows 10 | 2004 |
| Microsoft | Windows Server 2016 | All versions |
| Microsoft | Windows Server 2016 | 1903 |
| Microsoft | Windows Server 2016 | 1909 |
| Microsoft | Windows Server 2016 | 2004 |
| Microsoft | Windows Server 2019 | All versions |
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1511Patch, Vendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1511Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-1511?
How severe is CVE-2020-1511?
How do I fix CVE-2020-1511?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-15104In Envoy before versions 1.12.6, 1.13.4, 1.14.4, and 1.15.0 …5.4
- CVE-2020-15105Django Two-Factor Authentication before 1.12, stores the use…5.4
- CVE-2020-15106In etcd before versions 3.3.23 and 3.4.10, a large slice cau…6.5
- CVE-2020-15107In openenclave before 0.10.0, enclaves that use x87 FPU oper…5.3
- CVE-2020-15108In glpi before 9.5.1, there is a SQL injection for all usage…7.1
- CVE-2020-15109In solidus before versions 2.8.6, 2.9.6, and 2.10.2, there i…5.3
- CVE-2020-15110In jupyterhub-kubespawner before 0.12, certain usernames wil…8.1
- CVE-2020-15111In Fiber before version 1.12.6, the filename that is given i…5.4
- CVE-2020-15112In etcd before versions 3.3.23 and 3.4.10, it is possible to…6.5
- CVE-2020-15113In etcd before versions 3.3.23 and 3.4.10, certain directory…7.1
- CVE-2020-15114In etcd before versions 3.3.23 and 3.4.10, the etcd gateway …7.7
- CVE-2020-15115etcd before versions 3.3.23 and 3.4.10 does not perform any …7.5
Are you affected by CVE-2020-1511?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST