CVE-2020-1292

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to configuration settings, aka 'OpenSSH for Windows Elevation of Privilege Vulnerability'.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Jun 9, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-129205.5A potential denial of service issue exists in the AMD Display driver Escape 0x130007 Call handler. An attacker with low privilege could pote CVE-2020-129266.4The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happens. This can leave t CVE-2020-129277.8A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privil CVE-2020-129287.8A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT aut CVE-2020-129297.8Improper parameters validation in some trusted applications of the PSP contained in the AMD Graphics Driver may allow a local attacker to by CVE-2020-12937.8An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'CVE-2020-129307.8Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially l CVE-2020-129317.8Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentiall CVE-2020-129335.5A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A s CVE-2020-12947.8An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi CVE-2020-129447.8Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.CVE-2020-129467.1Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service.