Microsoft Office 365 Apps for Enterprise fino 2019 Access Connectivity Engine Remote Code Execution

Un punto critico di livello critico è stato rilevato in Microsoft Office 2010 SP2 fino 2019 (Office Suite Software). Da questa vulnerabilità è interessato una funzione sconosciuta del componente Access Connectivity Engine. Applicando a patch è possibile eliminare il problema. Una possibile soluzione è stata pubblicata immediatamente dopo la pubblicazione della vulnerabilità.

Campo	11/11/2020 09:53	05/12/2020 01:33	05/12/2020 01:36
cvss3_vuldb_s	U	U	U
cvss3_vendor_i	H	H	H
cvss3_vuldb_rl	O	O	O
type	Security Guidance	Security Guidance	Security Guidance
cvss3_vuldb_e	U	U	U
vendor	Microsoft	Microsoft	Microsoft
cvss3_vendor_rc	C	C	C
date	1604995200 (10/11/2020)	1604995200 (10/11/2020)	1604995200 (10/11/2020)
cvss3_vendor_c	H	H	H
url	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17062	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17062	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17062
date	1604995200 (10/11/2020)	1604995200 (10/11/2020)	1604995200 (10/11/2020)
cvss3_vuldb_ui	R	R	R
cvss3_vuldb_pr	N	N	N
name	Patch	Patch	Patch
location	Website	Website	Website
cvss3_vuldb_ac	L	L	L
cvss3_vendor_ac	L	L	L
cvss3_vendor_pr	N	N	N
cvss3_vendor_s	U	U	U
cvss3_vendor_ui	R	R	R
cvss3_vendor_rl	O	O	O
disputed	0	0	0
cvss3_vendor_a	H	H	H
cvss3_vendor_e	U	U	U
cvss2_vuldb_rc	C	C	C
cve	CVE-2020-17062	CVE-2020-17062	CVE-2020-17062
falsepositive	0	0	0
cvss3_vuldb_rc	C	C	C
cvss3_vendor_av	L	L	L
version	2010 SP2/2013 SP1/2013 RT SP1/2016/2019/365 Apps for Enterprise	2010 SP2/2013 SP1/2013 RT SP1/2016/2019/365 Apps for Enterprise	2010 SP2/2013 SP1/2013 RT SP1/2016/2019/365 Apps for Enterprise
component	Access Connectivity Engine	Access Connectivity Engine	Access Connectivity Engine
name	Office	Office	Office
cvss3_vuldb_av	N	N	N
cvss3_vuldb_c	L	L	L
cvss3_vuldb_i	L	L	L
cvss3_vuldb_a	L	L	L
type	Office Suite Software	Office Suite Software	Office Suite Software
cvss2_vuldb_av	N	N	N
cvss2_vuldb_ac	L	L	L
cvss2_vuldb_au	N	N	N
cvss2_vuldb_ci	P	P	P
cvss2_vuldb_ii	P	P	P
cvss2_vuldb_ai	P	P	P
cvss2_vuldb_e	U	U	U
cvss2_vuldb_rl	OF	OF	OF
cvss2_vuldb_basescore	7.5	7.5	7.5
cvss2_vuldb_tempscore	5.5	5.5	5.5
cvss3_vuldb_basescore	6.3	6.3	6.3
cvss3_vuldb_tempscore	5.5	5.5	5.5
cvss3_meta_basescore	7.0	7.0	7.3
cvss3_meta_tempscore	6.1	6.1	6.4
price_0day	$5k-$25k	$5k-$25k	$5k-$25k
cve_assigned		1596492000	1596492000
cve_nvd_summary		Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability	Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
cvss3_vendor_basescore		7.8	7.8
cvss3_nvd_av			L
cvss3_nvd_ac			L
cvss3_nvd_pr			N
cvss3_nvd_ui			R
cvss3_nvd_s			U
cvss3_nvd_c			H
cvss3_nvd_i			H
cvss3_nvd_a			H
cvss2_nvd_av			N
cvss2_nvd_ac			M
cvss2_nvd_au			N
cvss2_nvd_ci			C
cvss2_nvd_ii			C
cvss2_nvd_ai			C
cvss2_nvd_basescore			9.3
cvss3_nvd_basescore			7.8

◂ Precedente Visione d'insieme Il prossimo ▸

Interested in the pricing of exploits?

See the underground prices here!