CVE-2020-8270CWE-78

An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes…

published November 16, 2020

CVSS
—
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 hotfix CTX285341 and CTX285342

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03480 · 89.0th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2020-11-16T00:35Z
EPSS history
Timeline
  • 16 NOV 00:35Z
    An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes…
    cvelistv5