CVE-2020-17092: 
vulnerability analysis and mitigation

Windows Network Connections Service Elevation of Privilege Vulnerability (CVE-2020-17092) was identified and disclosed in 2020. The vulnerability affects multiple versions of Microsoft Windows operating systems, including Windows 10, Windows 8.1, Windows RT 8.1, and various Windows Server versions (NVD).

The vulnerability has received a CVSS v3.1 base score of 7.8 (High) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a base score of 7.2 (High) with the vector (AV:L/AC:L/Au:N/C:C/I:C/A:C). The vulnerability requires local access with low attack complexity and privileged access, but no user interaction (NVD).

This elevation of privilege vulnerability in the Windows Network Connections Service could allow an attacker to gain higher privileges on the affected system. The vulnerability affects confidentiality, integrity, and availability of the system, all rated as High under CVSS v3.1 scoring (NVD).

The vulnerability requires local access and low attack complexity to exploit. An attacker would need privileged access to exploit this vulnerability, though no user interaction is required (NVD).

Microsoft has released security updates to address this vulnerability. Users should apply the appropriate patches through Windows Update or download them directly from the Microsoft Security Update Guide (Microsoft Advisory).