Vulnerability Details : CVE-2020-1337

Exploit prediction scoring system (EPSS) score for CVE-2020-1337

Metasploit modules for CVE-2020-1337

• Microsoft Spooler Local Privilege Elevation Vulnerability

  Disclosure Date : 2019-11-04

  exploit/windows/local/cve_2020_1337_printerdemon

  This exploit leverages a file write vulnerability in the print spooler service which will restart if stopped. Because the service cannot be stopped long enough to remove the dll, there is no way to remove the dll once it is loaded by the service. Essentially, on default settings, this module adds a permanent elevated backdoor. Authors: - Peleg Hadar - Tomer Bar - 404death - sailay1996 - bwatters-r7

  More information

CVSS scores for CVE-2020-1337

CWE ids for CVE-2020-1337

• CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
  The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.
  Assigned by: [email protected] (Primary)

References for CVE-2020-1337

Products affected by CVE-2020-1337