CVE-2020-8283

Description

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.369

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Citrix Virtual Apps 1912	Windows
Vulnerabilities CVE-2020-8269,CVE-2020-8270,CVE-2020-8283 are affected in Citrix Virtual Apps 2006	Windows
Improper Privilege Management Vulnerability (CVE-2020-8283)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234