CVE-2020-1133: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

Overview

Severity

Medium (CVSS 5.5)

CVSS Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

Category

Elevation of Privilege

Exploit Status

Not Exploited

Exploitation Likelihood

Less Likely

Patch Tuesday

2020-Sep

Released

2020-09-08

EPSS Score

0.41% (percentile: 61.1%)

Description

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The update addresses the vulnerability by correcting the way the Diagnostics Hub Standard Collector handles file operations.

Affected Products (34)

Other

• 11785
• 11600
• 11658
• 11720
• 10577
• 11497
• 11498
• 11563
• 11568
• 11569
• 11570
• 11571
• 11572
• 11712
• 11713
• 11714
• 11715
• 11453
• 11454
• 11583
• 11644
• 11645
• 11646
• 11647
• 11766
• 11767
• 11768
• 11769
• 10729
• 10735
• 10852
• 10853
• 10816
• 10855

Security Updates (12)

• Release Notes
• Release Notes
• Release Notes
• Release Notes
• 4576950
• 4577032
• 4570333
• 4574727
• 4577041
• 4571756
• 4577049
• 4577015

Acknowledgments

Yuki Chen

Revision History

• 2020-09-08: Information published.