CVE-2020-1986
Last modified
CVE-2020-1986 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:\) to cause a system crash on every login. This issue affects all versions Secdo for Windows.. EPSS estimates a 0.26% chance of exploitation in the next 30 days.
Description
Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:\) to cause a system crash on every login. This issue affects all versions Secdo for Windows.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Paloaltonetworks | Secdo | All versions |
References
- https://security.paloaltonetworks.com/CVE-2020-1986Vendor Advisory
- https://security.paloaltonetworks.com/CVE-2020-1986Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-1986?
How severe is CVE-2020-1986?
How do I fix CVE-2020-1986?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-1984Secdo tries to execute a script at a hardcoded path if prese…7.8
- CVE-2020-1985Incorrect Default Permissions on C:\Programdata\Secdo\Logs f…7.8
- CVE-2020-19850An issue found in Directus API v.2.2.0 allows a remote attac…6.5
- CVE-2020-19853BlueCMS v1.6 contains a SQL injection vulnerability via /ad_…9.8
- CVE-2020-19855phpwcms v1.9 contains a cross-site scripting (XSS) vulnerabi…6.1
- CVE-2020-19858Platinum Upnp SDK through 1.2.0 has a directory traversal vu…7.5
- CVE-2020-19860When ldns version 1.7.1 verifies a zone file, the ldns_rr_ne…6.5
- CVE-2020-19861When a zone file in ldns 1.7.1 is parsed, the function ldns_…7.5
- CVE-2020-1987An information exposure vulnerability in the logging compone…3.3
- CVE-2020-19877DBHcms v1.2.0 has a directory traversal vulnerability as the…5.3
- CVE-2020-19878DBHcms v1.2.0 has a sensitive information leaks vulnerabilit…7.5
- CVE-2020-19879DBHcms v1.2.0 has a stored xss vulnerability as there is no …6.1
Are you affected by CVE-2020-1986?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST