EXPOSURES › CVE-2020-0787
CVE-2020-0787
CRITICAL ⌖ ON CISA KEV · EXPLOITEDA Microsoft Windows vulnerability allowed privilege escalation to system-level access via improper symbolic link handling, actively exploited in ransomware attacks.
The BITS service vulnerability (CVE-2020-0787) enabled attackers to gain system privileges, potentially leading to ransomware deployment or data exfiltration. DIB organizations using Windows must ensure timely patching and review of BITS service configurations to mitigate this risk and maintain CMMC/NIST 800-171 compliance.
Shame score — The vulnerability's exploitation in ransomware campaigns highlights a significant failure in Microsoft's security practices and a potential for widespread compromise within the DIB.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |