Rewterz Threat Advisory – CVE-2020-16994 – Microsoft Azure Sphere code execution
November 11, 2020Rewterz Threat Advisory – CVE-2020-0592 – Intel BIOS firmware for multiple Processors privilege escalation
November 11, 2020Rewterz Threat Advisory – CVE-2020-16994 – Microsoft Azure Sphere code execution
November 11, 2020Rewterz Threat Advisory – CVE-2020-0592 – Intel BIOS firmware for multiple Processors privilege escalation
November 11, 2020Severity
High
Analysis Summary
Citrix Virtual Apps and Desktops could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper privilege management. By sending a specially-crafted request, an authenticated attacker could exploit this vulnerability to execute arbitrary command execution as SYSTEM.
Impact
Privilege escalation
Affected Vendors
Citrix
Affected Products
Citrix Virtual Apps and Desktops
Remediation
Refer to CTX285059 for patch, upgrade or suggested workaround information.