CVE Catalog

CVE-2020-1123

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.96%

59th percentile - higher than 59% of all known CVEs

Summary

Denial of service vulnerability in Connected User Experiences and Telemetry Service due to improper handling of file operations.

Risk Assessment

An attacker who logs on to the system could run a specially crafted application that causes the system to stop responding (denial of service).

Recommendation

Install the security update that corrects how the service handles file operations.

Other vulnerabilities in Connected User Experiences and Telemetry Service

Original NVD description (English source)

A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could cause a system to stop responding. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability. The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service handles file operations.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS