CVE-2020-17040: 
vulnerability analysis and mitigation

Windows Hyper-V Security Feature Bypass Vulnerability (CVE-2020-17040) was disclosed on November 10, 2020. The vulnerability affects various versions of Microsoft Windows including Windows 10, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019 (NVD).

The vulnerability received varying severity scores from different organizations. Microsoft Corporation assigned it a CVSS v3.1 Base Score of 6.5 (Medium) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L, while NIST's NVD assessment rated it as Critical with a CVSS v3.1 Base Score of 9.8 and vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (NVD).

The vulnerability could allow an attacker to bypass security features in Windows Hyper-V, potentially compromising the security of virtualized environments. The high CVSS scores indicate that successful exploitation could lead to significant security impacts including confidentiality, integrity, and availability breaches (NVD).

The vulnerability requires network access with low attack complexity and no user interaction for exploitation. No authentication is required to exploit this vulnerability, making it potentially more accessible to attackers (NVD).

Microsoft released security updates to address this vulnerability as part of the November 2020 Patch Tuesday. Multiple KB updates were provided for different affected versions, including KB4586781 for Windows 10 version 2004 and 20H2, KB4586786 for versions 1903 and 1909, KB4586793 for version 1809, KB4586823 for Windows Server 2012 R2, and KB4586830 for Windows Server 2016 (Rapid7).