CVE-2020-1393
Description
An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior, aka Windows Diagnostics Hub Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2020-1418.
Risk Information
Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.285
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1809 for x64-based Systems (KB4558998) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1809 for x86-based Systems (KB4558998) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows Server 2019 for x64-based Systems (KB4558998) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1709 for x86-based Systems (KB4565508) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1709 for x64-based Systems (KB4565508) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1803 for x64-based Systems (KB4565489) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1803 for x86-based Systems (KB4565489) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4565511) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4565511) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows Server 2016 for x64-based Systems (KB4565511) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1507 for x86-based Systems (KB4565513) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1507 for x64-based Systems (KB4565513) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1903 for x64-based Systems (KB4565483) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1909 for x64-based Systems (KB4565483) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows Server, version 1903 for x64-based Systems (KB4565483) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1903 for x86-based Systems (KB4565483) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows Server, version 1909 for x64-based Systems (KB4565483) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 1909 for x86-based Systems (KB4565483) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows Server, version 2004 for x64-based Systems (KB4565503) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 2004 for x86-based Systems (KB4565503) | Windows |
| VBScript Remote Code Execution Vulnerability for Windows 10 Version 2004 for x64-based Systems (KB4565503) | Windows |
| Vulnerabilities CVE-2020-1393 are affected in Microsoft Visual Studio Community 2017 15.9.24 | Windows |
| Vulnerabilities CVE-2020-1393,CVE-2020-1416 are affected in Microsoft Visual Studio Community 2019 16.4.10 | Windows |
| Vulnerabilities CVE-2020-1393,CVE-2020-1416 are affected in Microsoft Visual Studio Community 2019 16.6.3 | Windows |
| Vulnerabilities CVE-2020-1393 are affected in Microsoft Visual Studio Enterprise 2017 15.9.24 | Windows |
| Vulnerabilities CVE-2020-1393,CVE-2020-1416 are affected in Microsoft Visual Studio Enterprise 2019 16.4.10 | Windows |
| Vulnerabilities CVE-2020-1393,CVE-2020-1416 are affected in Microsoft Visual Studio Enterprise 2019 16.6.3 | Windows |
| Vulnerabilities CVE-2020-1393 are affected in Microsoft Visual Studio Professional 2017 15.9.24 | Windows |
| Vulnerabilities CVE-2020-1393,CVE-2020-1416 are affected in Microsoft Visual Studio Professional 2019 16.4.10 | Windows |
| Vulnerabilities CVE-2020-1393,CVE-2020-1416 are affected in Microsoft Visual Studio Professional 2019 16.6.3 | Windows |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-29238 | 2020-07 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB4558998) (KB4569509) (CVE-2020-1350) |
| PATCH-29239 | 2020-07 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB4558998,KB4569509) (CVE-2020-1350) |
| PATCH-29240 | 2020-07 Cumulative Update for Windows Server 2019 for x64-based Systems (KB4558998,KB4569509) (CVE-2020-1350) |
| PATCH-29246 | 2020-07 Cumulative Update for Windows 10 Version 1709 for x86-based Systems (KB4565508) |
| PATCH-29247 | 2020-07 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4565508) |
| PATCH-29241 | 2020-07 Cumulative Update for Windows 10 Version 1803 for x64-based Systems (KB4565489) |
| PATCH-29242 | 2020-07 Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB4565489) |
| PATCH-29254 | 2020-07 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB4565511) (CVE-2020-1350) |
| PATCH-29255 | 2020-07 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4565511) (CVE-2020-1350) |
| PATCH-29256 | 2020-07 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4565511) (CVE-2020-1350) |
| PATCH-29257 | 2020-07 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB4565513) |
| PATCH-29258 | 2020-07 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB4565513) |
| PATCH-29248 | 2020-07 Cumulative Update for Windows 10 Version 1903 for x64-based Systems (KB4565483,KB4569509) (CVE-2020-1350) |
| PATCH-29249 | 2020-07 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB4565483,KB4569509) (CVE-2020-1350) |
| PATCH-29250 | 2020-07 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4565483,KB4569509) (CVE-2020-1350) |
| PATCH-29251 | 2020-07 Cumulative Update for Windows 10 Version 1903 for x86-based Systems (KB4565483,KB4569509) (CVE-2020-1350) |
| PATCH-29252 | 2020-07 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB4565483,KB4569509) (CVE-2020-1350) |
| PATCH-29253 | 2020-07 Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB4565483,KB4569509) (CVE-2020-1350) |
| PATCH-29243 | 2020-07 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB4565503,KB4569509) (CVE-2020-1350) |
| PATCH-29244 | 2020-07 Cumulative Update for Windows 10 Version 2004 for x86-based Systems (KB4565503,KB4569509) (CVE-2020-1350) |
| PATCH-29245 | 2020-07 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB4565503,KB4569509) (CVE-2020-1350) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234