CVE-2020-0787
UNKNOWN
Published 2020-03-12T15:48:16.000Z
Actions:
CVSS Score
V3.1
7.8
/10
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score Metrics
Exploitability: N/A
Impact: N/A
EPSS Score
v2023.03.01
0.802
probability
of exploitation in the wild
There is a 80.2% chance that this vulnerability will be exploited in the wild within the next 30 days.
Updated: 2025-01-25
Exploit Probability
Percentile: 0.986
Higher than 98.6% of all CVEs
Attack Vector Metrics
Impact Metrics
Description
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
Available Exploits
No exploits available for this CVE.
Related News
No news articles found for this CVE.
Affected Products
Affected Versions:
10 Version 1803 for 32-bit Systems
10 Version 1803 for x64-based Systems
10 Version 1803 for ARM64-based Systems
10 Version 1809 for 32-bit Systems
10 Version 1809 for x64-based Systems
10 Version 1809 for ARM64-based Systems
10 Version 1709 for 32-bit Systems
10 Version 1709 for x64-based Systems
10 Version 1709 for ARM64-based Systems
10 for 32-bit Systems
10 for x64-based Systems
10 Version 1607 for 32-bit Systems
10 Version 1607 for x64-based Systems
7 for 32-bit Systems Service Pack 1
7 for x64-based Systems Service Pack 1
8.1 for 32-bit systems
8.1 for x64-based systems
RT 8.1
Affected Versions:
version 1803 (Core Installation)
2019
2019 (Core installation)
2016
2016 (Core installation)
2008 for 32-bit Systems Service Pack 2
2008 for 32-bit Systems Service Pack 2 (Core installation)
2008 for Itanium-Based Systems Service Pack 2
2008 for x64-based Systems Service Pack 2
2008 for x64-based Systems Service Pack 2 (Core installation)
2008 R2 for Itanium-Based Systems Service Pack 1
2008 R2 for x64-based Systems Service Pack 1
2008 R2 for x64-based Systems Service Pack 1 (Core installation)
2012
2012 (Core installation)
2012 R2
2012 R2 (Core installation)
Affected Versions:
Affected Versions:
Affected Versions:
Affected Versions:
Affected Versions:
Affected Versions:
Affected Versions:
Affected Versions:
Known Exploited Vulnerability
This vulnerability is actively being exploited in the wild
Remediation Status
Overdue
Due Date
July 28, 2022
Added to KEV
January 28, 2022
Required Action
Apply updates per vendor instructions.
Affected Product
Vendor/Project:
Microsoft
Product:
Windows
Ransomware Risk
Known Ransomware Use
KEV Catalog Version: 2025.01.24
Released: January 24, 2025
References
Published: 2020-03-12T15:48:16.000Z
Last Modified: 2025-02-07T15:17:54.510Z
Copied to clipboard!