KLA11747 Multiple vulnerabilities in Mycrosoft System Center

Multiple vulnerabilities were found in Mycrosoft System Center. Malicious users can exploit these vulnerabilities to gain privileges.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft Defender can be exploited remotely via specially crafted command to gain privileges.
2. An elevation of privilege vulnerability in Windows Defender Antimalware Platform Hard Link can be exploited remotely via specially crafted application to gain privileges.

Original advisories

CVE-2020-1002

CVE-2020-0835

Related products

Microsoft-Windows

Windows-Defender

CVE list

CVE-2020-1002 high

CVE-2020-0835 high

KB list

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• Microsoft System Center Endpoint ProtectionMicrosoft Security EssentialsMicrosoft System Center 2012 Endpoint ProtectionWindows DefenderWindows Defender antimalware platformMicrosoft System Center 2012 R2 Endpoint ProtectionMicrosoft Forefront Endpoint Protection 2010