CVE-2020-1421

{"id": "CVE-2020-1421", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2020-07-14T23:15:18.087", "references": [{"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1421", "tags": ["Patch", "Vendor Advisory"], "source": "secure@microsoft.com"}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-923/", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secure@microsoft.com"}, {"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1421", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-923/", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-843"}]}], "descriptions": [{"lang": "en", "value": "A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'LNK Remote Code Execution Vulnerability'."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de ejecuci\u00f3n de c\u00f3digo remota en Microsoft Windows que podr\u00eda permitir una ejecuci\u00f3n de c\u00f3digo remota si un archivo .LNK es procesado. Un atacante que explotar\u00e1 esta vulnerabilidad podr\u00eda obtener los mismos derechos de usuario que el usuario local, tambi\u00e9n se conoce como \"LNK Remote Code Execution Vulnerability\""}], "lastModified": "2024-11-21T05:10:28.233", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "084984D5-D241-497B-B118-50C6C1EAD468"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "BA592626-F17C-4F46-823B-0947D102BBD2"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "897A48D7-FCA1-4560-AFBB-718AF19BA3A2"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "507EB48C-F479-424C-8ABA-C279AB4FE3F4"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "8C72C155-6880-434B-B217-EAA3BA2D0BB8"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "1B3308A0-1699-4A4A-8D6B-AB4E4C825C95"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "C96ED0E4-E43A-433C-AD98-FD6AEEB70BA2"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "39EAF874-1941-4FB8-A70A-BD53F89801E4"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "1981BA0D-0920-40C0-8A6A-5D5A1B221560"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "5DBF4B5B-8782-494D-86FC-B83DCEB735A3"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "925B8C67-C96F-4A4D-9BE7-CCCD78EF3C31"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "6CF580BA-6938-40F6-9D86-F43044A6BACA"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "C5E038AA-514F-48AC-B45E-859EE32525B4"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "16F864AE-C519-4D23-9D24-B65E53C5CD28"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "2487AF09-F003-482A-BD42-31F6AEAA033F"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "A07F4D5D-EA91-4B77-9B74-D4741FFA8D85"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "31622391-A67E-4E2A-A855-1316B6E38630"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "61F0792D-7587-4297-8EE7-D4DC3A30EE84"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "7649042B-4430-4BD9-B82F-984A2831A651"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:arm64:*", "vulnerable": true, "matchCriteriaId": "E6132F03-DA28-4830-A69F-C2154C7FD96C"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "09D9A720-8D3C-4699-AC57-CB4531E5BFEB"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "BF67A7F7-466F-467D-8D2B-3273714D43C3"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B921FDB-8E7D-427E-82BE-4432585080CF"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C253A63F-03AB-41CB-A03A-B2674DEA98AA"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}