CVE-2020-17070:Windows Update Medic Service Elevation of Privilege Vulnerability (CVE-2020-17070)

splash
Back

Description Preview

This vulnerability in the Windows Update Medic Service could allow an attacker to elevate their privileges on a targeted system. The Windows Update Medic Service is designed to repair Windows Update components when they become damaged or corrupted, but this security flaw could be exploited to gain higher levels of access to the system.

Overview

CVE-2020-17070 is an elevation of privilege vulnerability affecting the Windows Update Medic Service in Microsoft Windows. This vulnerability could allow a local attacker to execute code with elevated privileges. The attack requires the attacker to have the ability to execute code on the target system first. If successfully exploited, the attacker could gain administrative privileges, potentially taking complete control of the affected system. This would enable them to install programs, view, change, or delete data, or create new accounts with full user rights.

Remediation

To address this vulnerability, Microsoft has released security updates. Users should apply the appropriate security update for their version of Windows as soon as possible. The updates can be obtained through Windows Update or by downloading them directly from the Microsoft Update Catalog. Organizations should prioritize patching systems that are accessible to untrusted users first. Additionally, implementing the principle of least privilege for user accounts and applications can help mitigate the impact of this vulnerability if it is exploited.

References

  1. Microsoft Security Advisory: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17070
  2. Microsoft Security Response Center: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17070
  3. Microsoft Update Catalog: https://www.catalog.update.microsoft.com/

Industry ExposureMost to least
This section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.

  1. Manufacturing
    Manufacturing
  2. Health Care & Social Assistance
    Health Care & Social Assistance
  3. Public Administration
    Public Administration
  4. Educational Services
    Educational Services
  5. Finance and Insurance
    Finance and Insurance
  6. Transportation & Warehousing
    Transportation & Warehousing
  7. Retail Trade
    Retail Trade
  8. Utilities
    Utilities
  9. Professional, Scientific, & Technical Services
    Professional, Scientific, & Technical Services
  10. Other Services (except Public Administration)
    Other Services (except Public Administration)
  11. Management of Companies & Enterprises
    Management of Companies & Enterprises
  12. Arts, Entertainment & Recreation
    Arts, Entertainment & Recreation
  13. Information
    Information
  14. Construction
    Construction
  15. Accommodation & Food Services
    Accommodation & Food Services
  16. Real Estate Rental & Leasing
    Real Estate Rental & Leasing
  17. Agriculture, Forestry Fishing & Hunting
    Agriculture, Forestry Fishing & Hunting
  18. Mining
    Mining
  19. Wholesale Trade
    Wholesale Trade
  20. Administrative, Support, Waste Management & Remediation Services
    Administrative, Support, Waste Management & Remediation Services

Focus on What Matters

  1. See Everything.
  2. Identify True Risk.
  3. Proactively Mitigate Threats.

Let's talk!

background
Armis Vulnerability Intelligence Database