An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system
To exploit this vulnerability, an attacker would need to run a specially crafted application against an RPC server which has Routing and Remote Access enabled. Routing and Remote Access is a non-default configuration; systems without it enabled are not vulnerable.
The security update addresses the vulnerability by correcting how the Routing and Remote Access service handles requests.
References
| Link | Resource |
|---|---|
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1383 | Patch Vendor Advisory |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1383 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:10
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1383 - Patch, Vendor Advisory |
19 Jan 2024, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system To exploit this vulnerability, an attacker would need to run a specially crafted application against an RPC server which has Routing and Remote Access enabled. Routing and Remote Access is a non-default configuration; systems without it enabled are not vulnerable. The security update addresses the vulnerability by correcting how the Routing and Remote Access service handles requests. |
04 Jan 2024, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | <p>An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system</p> <p>To exploit this vulnerability, an attacker would need to run a specially crafted application against an RPC server which has Routing and Remote Access enabled. Routing and Remote Access is a non-default configuration; systems without it enabled are not vulnerable.</p> <p>The security update addresses the vulnerability by correcting how the Routing and Remote Access service handles requests.</p> |
Information
Published : 2020-08-17 19:15
Updated : 2024-11-21 05:10
NVD link : CVE-2020-1383
Mitre link : CVE-2020-1383
CVE.ORG link : CVE-2020-1383
JSON object : View
Products Affected
microsoft
- windows_10
- windows_7
- windows_8.1
- windows_rt_8.1
- windows_server_2016
- windows_server_2019
- windows_server_2012
- windows_server_2008
CWE