CVE-2020-17036: 
vulnerability analysis and mitigation

Windows Function Discovery SSDP Provider Information Disclosure Vulnerability (CVE-2020-17036) was identified and disclosed in November 2020. This vulnerability affects various versions of Microsoft Windows operating systems, including Windows 10 (versions 1607, 1803, 1809, 1903, 1909, 2004, 20H2) and Windows 7 SP1 (NVD Database).

The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Under CVSS v2.0, it received a base score of 4.9 (Medium) with the vector (AV:L/AC:L/Au:N/C:C/I:N/A:N) (NVD Database).

This vulnerability could lead to information disclosure when exploited. The CVSS scoring indicates that while the vulnerability has high confidentiality impact, it does not affect system integrity or availability (NVD Database).

The vulnerability requires local access and low attack complexity to exploit. An attacker would need local user privileges to execute an attack, but no user interaction is required (NVD Database).

Microsoft has released security updates to address this vulnerability. Users should apply the appropriate patches through Windows Update (Microsoft Advisory).