CVE-2020-3427

The Windows Logon installer prior to 4.1.2 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the installer to write to arbitrary privileged directories. If successful, an attacker can manipulate files used by Windows Logon, cause Denial of Service (DoS) by deleting file(s), or replace system files to potentially achieve elevation of privileges. Note that this can only exploitable during new installations while the installer is running and is not exploitable once installation is finished. Versions 4.1.2 of Windows Logon addresses this issue.

• CWE-280

• https://duo.com/docs/rdp-notesRelease Notes, Vendor Advisory
• https://duo.com/docs/rdp-notesRelease Notes, Vendor Advisory

Published

Oct 14, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3420A vulnerability in the web-based management interface of Cis…5.4
• CVE-2020-3421Multiple vulnerabilities in the Zone-Based Firewall feature …7.5
• CVE-2020-3422A vulnerability in the IP Service Level Agreement (SLA) resp…7.5
• CVE-2020-3423A vulnerability in the implementation of the Lua interpreter…6.7
• CVE-2020-3425Multiple vulnerabilities in the web management framework of …8.8
• CVE-2020-3426A vulnerability in the implementation of the Low Power, Wide…9.1
• CVE-2020-3428A vulnerability in the WLAN Local Profiling feature of Cisco…6.5
• CVE-2020-3429A vulnerability in the WPA2 and WPA3 security implementation…6.5
• CVE-2020-3430A vulnerability in the application protocol handling feature…8.8
• CVE-2020-3431A vulnerability in the web-based management interface of Cis…6.1
• CVE-2020-3432A vulnerability in the uninstaller component of Cisco AnyCon…5.6
• CVE-2020-3433A vulnerability in the interprocess communication (IPC) chan…7.8