CVE-2020-0702

Surface Hub Security Feature Bypass Vulnerability

CVE-2020-0702 is fixed in Microsoft Surface Hub on 1 platform by KB4537765 (version 15063.2284), released February 11, 2020. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
n/a
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0086
58th percentile

<p>A security feature bypass vulnerability exists in Surface Hub when prompting for credentials. Successful exploitation of the vulnerability could allow an attacker to access settings which are restricted to Administrators.</p> <p>To exploit the vulnerability, an attacker would need to have physical access to a Surface Hub.</p> <p>The update addresses the vulnerability by correcting how credentials are validated when accessing restricted settings.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Microsoft Surface Hub 15063.2284 KB4537765 Feb 11, 2020

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.