✕
Request a Demo
Rewterz
Rewterz Threat Advisory – CVE-2019-13933 – ICS: Advisory on Siemens SCALANCE X Switches
January 15, 2020
Rewterz
Rewterz Threat Advisory – CVE-2019-14613 – Intel VTune Amplifier for Windows Privilege Escalation Vulnerability
January 15, 2020

Rewterz Threat Advisory – CVE-2020-0601 – Microsoft Windows CryptoAPI fails to properly validate ECC certificate chains

Severity

High

Analysis summary

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.

An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source. The user would have no way of knowing the file was malicious, because the digital signature would appear to be from a trusted provider.

Impact

Spoof Validity

Remediation

Apply update Microsoft Update for CVE-2020-0601