CVE-2020-0787: Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

High severity · published Mar 12, 2020

CVE-2020-0787

Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

RansomwareIn wildKEV

7.8

CVSS

42.5%

EPSS

Yes

On KEV

Description

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)42.5% · higher than 99% of CVEs

Exploited in the wildYes

CISA KEVListed Jan 28, 2022

Federal remediation dueJul 28, 2022

Ransomware campaign useKnown

Affected products

Which versions

Windows · Microsoft

10 Version 1803 for 32-bit Systems; 10 Version 1803 for x64-based Systems; 10 Version 1803 for ARM64-based Systems; 10 Version 1809 for 32-bit Systems; 10 Version 1809 for x64-based Systems; 10 Version 1809 for ARM64-based Systems; +12 more · source: vendor, KEV

Windows 10 Version 1903 for 32-bit Systems · Microsoft