CVE-2020-1123
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
Denial of service vulnerability in Connected User Experiences and Telemetry Service due to improper handling of file operations.
Risk Assessment
An attacker who logs on to the system could run a specially crafted application that causes the system to stop responding (denial of service).
Recommendation
Install the security update that corrects how the service handles file operations.
Other vulnerabilities in Connected User Experiences and Telemetry Service
Original NVD description (English source)
A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could cause a system to stop responding. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability. The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service handles file operations.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

