Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
Unknown
Privileges Required
Unknown
Attack Vector
Unknown
0

CVE-2020-16897

Disclosure Date: October 16, 2020 •
CVE-2020-16897
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

An information disclosure vulnerability exists when NetBIOS over TCP (NBT) Extensions (NetBT) improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.

To exploit this vulnerability, an attacker would have run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.

The update addresses the vulnerability by correcting how a NetBT handles objects in memory.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
None
Impact Score:
Unknown
Exploitability Score:
Unknown
Vector:
Unknown
Attack Vector (AV):
Unknown
Attack Complexity (AC):
Unknown
Privileges Required (PR):
Unknown
User Interaction (UI):
Unknown
Scope (S):
Unknown
Confidentiality (C):
Unknown
Integrity (I):
Unknown
Availability (A):
Unknown

General Information

Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
Windows 10 Version 1803 publication
Windows 10 Version 1809 publication
Windows Server 2019 publication
Windows Server 2019 (Server Core installation) publication
Windows 10 Version 1909 publication
Windows Server, version 1909 (Server Core installation) publication
Windows 10 Version 1709 for 32-bit Systems publication
Windows 10 Version 1709 publication
Windows 10 Version 1903 for 32-bit Systems publication
Windows 10 Version 1903 for x64-based Systems publication
Windows 10 Version 1903 for ARM64-based Systems publication
Windows Server, version 1903 (Server Core installation) publication
Windows 10 Version 2004 publication
Windows Server version 2004 publication
Windows 10 Version 1507 publication
Windows 10 Version 1607 publication
Windows Server 2016 publication
Windows Server 2016 (Server Core installation) publication
Windows 7 publication
Windows 7 Service Pack 1 publication
Windows 8.1 publication
Windows Server 2008 Service Pack 2 publication
Windows Server 2008 Service Pack 2 (Server Core installation) publication
Windows Server 2008 Service Pack 2 publication
Windows Server 2008 R2 Service Pack 1 publication
Windows Server 2008 R2 Service Pack 1 (Server Core installation) publication
Windows Server 2012 publication
Windows Server 2012 (Server Core installation) publication
Windows Server 2012 R2 publication
Windows Server 2012 R2 (Server Core installation) publication
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown

Vendors

  • microsoft

Products

  • windows 10 -,
  • windows 10 1607,
  • windows 10 1709,
  • windows 10 1803,
  • windows 10 1809,
  • windows 10 1903,
  • windows 10 1909,
  • windows 10 2004,
  • windows 7 -,
  • windows 8.1 -,
  • windows rt 8.1 -,
  • windows server 2008 -,
  • windows server 2008 r2,
  • windows server 2012 -,
  • windows server 2012 r2,
  • windows server 2016 -,
  • windows server 2016 1903,
  • windows server 2016 1909,
  • windows server 2016 2004,
  • windows server 2019 -

Additional Info

Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Technical Analysis