Vulnerability in Cisco Duo Authentication For Windows Logon And RDP
CVE-2020-3427
The Windows Logon installer prior to 4.1.2 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the installer to write to arbitrary privileged directories. If successful, an attacker can manipulate files used by Windows Logon, cause Denial of Service (DoS) by deleting file(s), or replace system files to potentially achieve elevation of privileges. Note that this can only exploitable during new installations while the installer is running and is not exploitable once installation is finished. Versions 4.1.2 of Windows Logon addresses this issue.
EPSS: 0.003 (22.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N.
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Release Notes, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-3427?
- CVE-2020-3427 is a medium-severity vulnerability in Cisco Duo Authentication For Windows Logon And RDP, classified under Improper Handling of Insufficient Permissions or Privileges. CVSS score: 6.6/10. Published 2020-10-14.
- How severe is CVE-2020-3427?
- Medium severity. CVSS v3 base score is 6.6 out of 10.
- Is CVE-2020-3427 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.