[ CVE-2020-0787 · Published 12 Mar 2020 ]
Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
Exploited · CISA KEV CVSS 7.8
EPSS 43%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-01-28
- Known to be used in ransomware campaigns
- EPSS: 43% chance of exploitation in the next 30 days (higher than 99% of CVEs)
[ Description ]Official description
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
CISA: Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 28 Jul 2022): Apply updates per vendor instructions.
- Patch on portal.msrc.microsoft.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- packetstormsecurity.com/files/158056/Background-Intelligent-Transfer-Service-Privilege-…ExploitThird Party AdvisoryVDB Entry
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0787PatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource