CVE-2020-1112CWE-434unrestricted-file-upload

CVE-2020-1112

High · published May 22, 2020

CVSS v3.1
8.5
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky elevation of privilege vulnerability lurks in the Windows Background Intelligent Transfer Service (BITS) that can leave your system wide open for mischief! Think of this like a hotel receptionist who mistakenly gives a guest access to the staff-only areas just because they flashed their key card – suddenly, they can waltz into restricted zones without proper permission. An attacker could exploit this vulnerability to elevate their privileges, potentially gaining access to sensitive data or critical system functions that should remain locked down. This could lead to unauthorized actions that compromise system integrity—yikes!

Put simply

Think of this like a hotel receptionist who mistakenly gives a guest access to the staff-only areas just because they flashed their key card – suddenly, they can waltz into restricted zones without proper permission. This vulnerability occurs when the BITS IIS module mishandles uploaded content, allowing unauthenticated users to gain higher privileges than intended. It's a flaw that disrupts the expected safety mechanisms within Windows services.

What to do

An attacker could exploit this vulnerability to elevate their privileges, potentially gaining access to sensitive data or critical system functions that should remain locked down. This could lead to unauthorized actions that compromise system integrity—yikes! To mitigate this, ensure you're running the latest updates for Windows that address this BITS vulnerability. Regularly audit your system's BITS settings, and apply best practices for access control to limit exposure. You've got this! Stay vigilant, keep your systems updated, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03293 · 88.4th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2020-05-22T03:15Z
Affected products (23)
ProductVersionsFixed in
microsoft/windows_10all versions—
microsoft/windows_10all versions—
microsoft/windows_10all versions—
microsoft/windows_10all versions—
microsoft/windows_10all versions—
microsoft/windows_10all versions—
microsoft/windows_10all versions—
microsoft/windows_10all versions—
microsoft/windows_10all versions—
microsoft/windows_7all versions—
microsoft/windows_7all versions—
microsoft/windows_8.1all versions—
microsoft/windows_8.1all versions—
microsoft/windows_rt_8.1all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2016all versions—
microsoft/windows_server_2019all versions—
References (2)
EPSS history
Timeline
  • 21 MAY 22:53Z
    An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content…
    cvelistv5