CVE-2020-1113
MediumCVSS 5.3Exploitation Probability (EPSS)
Very high risk94th percentile - higher than 94% of all known CVEs
Summary
A security feature bypass vulnerability in Microsoft Windows Task Scheduler service due to improper verification of client connections over RPC. A man-in-the-middle attacker could send a specially crafted request and run arbitrary code as administrator.
Risk Assessment
Risk of full system compromise, malware installation, data modification or deletion, and creation of accounts with full user rights.
Recommendation
Install the Microsoft security update that corrects how the Task Scheduler service validates connections.
Original NVD description (English source)
A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, a man-in-the-middle attacker would need to send a specially crafted request to a vulnerable system. The security update addresses the vulnerability by correcting how the Task Scheduler service validates connections.