CVE-2020-0601

critical-risk
Published 2020-01-14

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.

Do I need to act?

!
94.1% chance of exploitation in next 30 days
EPSS score — higher than 6% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
!
1 public exploit available
47933
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.1/10 High
NETWORK / LOW complexity

Affected Products (20)

Affected Vendors

Microsoft Golang

References (7)

Third Party Advisory http://packetstormsecurity.com/files/155960/CurveBall-Microsoft-Windows-CryptoAP...
Third Party Advisory http://packetstormsecurity.com/files/155961/CurveBall-Microsoft-Windows-CryptoAP...
Patch https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601
Third Party Advisory http://packetstormsecurity.com/files/155960/CurveBall-Microsoft-Windows-CryptoAP...
Third Party Advisory http://packetstormsecurity.com/files/155961/CurveBall-Microsoft-Windows-CryptoAP...
Patch https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601
US Government Resource https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-...
76
/ 100
critical-risk
Severity 28/34 · Critical
Exploitability 27/34 · High
Exposure 21/34 · High