CVE-2020-1270: 
vulnerability analysis and mitigation

CVE-2020-1270 is an elevation of privilege vulnerability that exists in the way that the wlansvc.dll handles objects in memory, also known as 'Windows WLAN Service Elevation of Privilege Vulnerability'. The vulnerability was discovered and assigned in November 2019 (CVE Mitre).

The vulnerability has been assigned a CVSS base score of 5.0 (AV:L/AC:L/Au:N/C:P/I:P/A:P), indicating a medium severity level. The vulnerability specifically affects the Windows WLAN Service through improper handling of objects in memory by wlansvc.dll (Rapid7).

If successfully exploited, this vulnerability could allow an attacker to gain elevated privileges on affected systems. The vulnerability affects multiple versions of Windows, including Windows 10 and Windows Server installations (Rapid7).

The vulnerability requires local access to the system for exploitation, as indicated by the CVSS attack vector (AV:L). An attacker would need to log on to the system and run a specially crafted application to exploit the vulnerability (Rapid7).

Microsoft has released security updates to address this vulnerability. The fixes are available through various KB updates including KB4557957, KB4560960, KB4561616, KB4561608, and others depending on the specific Windows version being used (Rapid7).