CVE-2020-3427

Duo Authentication for Windows Logon and RDP Privilege Escalation Vulnerability

State: Published
Severity: 6.6 Medium
Published: Oct 14, 2020
Updated: Nov 13, 2024
Reserved: Dec 12, 2019

Description

The Windows Logon installer prior to 4.1.2 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the installer to write to arbitrary privileged directories. If successful, an attacker can manipulate files used by Windows Logon, cause Denial of Service (DoS) by deleting file(s), or replace system files to potentially achieve elevation of privileges. Note that this can only exploitable during new installations while the installer is running and is not exploitable once installation is finished. Versions 4.1.2 of Windows Logon addresses this issue.

Scores

CVSS	Score	Vector	Source
3.1	6.6 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N	cisco

Weaknesses

CWE-280 Improper Handling of Insufficient Permissions or Privileges

Affected Products

Product	Versions
Duo Authentication for Windows Logon and RDPCisco	before 4.1.2Affected

References

Duo Authentication for Windows Logon and RDP Privilege Escalation Vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.