CISA confirmed this vulnerability is used in real attacks on 03.11.2021. Remediation deadline for US federal agencies: 03.05.2022.
Required action: Apply updates per vendor instructions. Reference CISA's ED 20-02 (https://www.cisa.gov/news-events/directives/ed-20-02-mitigate-windows-vulnerabilities-january-2020-patch-tuesday) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 20-02. https://nvd.nist.gov/vuln/detail/CVE-2020-0601
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x86:*cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:*cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:arm64:*cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x86:*cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_server_1909:-:*:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* ≥ 1.12 < 1.12.16cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* ≥ 1.13 < 1.13.7Our free, open-source honeypot sensor waits on ports your server does not use and reports the scanners and attackers that connect to a shared blocklist.