Main Vulnerability Database Vulnerabilities #VU25229

Permissions, Privileges, and Access Controls in Microsoft Windows and Windows Server - CVE-2020-0655

Published: February 11, 2020 / Updated: May 26, 2020

Vulnerability identifier: #VU25229

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-0655

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote authenticated user to escalate privileges on the system.

The vulnerability exists due to the way Remote Desktop Services formerly known as Terminal Services handles clipboard redirection. A remote authenticated user with access to a system running Remote Desktop Services can abuse clipboard redirection and execute arbitrary code in the context of another user's session.

Affected software

Microsoft Windows
Windows Server
Solutions Enabler Virtual Appliance
Solutions Enabler
Unisphere for PowerMax Virtual Appliance
Unisphere for PowerMax

How to mitigate CVE-2020-0655

Install updates from vendor's website.

Solutions Enabler Virtual Appliance - addressed in versions 9.0.0.19, 9.1.0.6
Solutions Enabler - addressed in versions 9.0.0.19, 9.1.0.6
Unisphere for PowerMax Virtual Appliance - addressed in versions 9.0.2.18, 9.1.0.17
Unisphere for PowerMax - addressed in versions 9.0.2.18, 9.1.0.17

Links to Public Exploits and PoC-codes

Exploit #2779 - CPR-Zero: CVE-2020-0655 (May 26, 2020)

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0655