[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNoRqemkENDV5G75k2LGJ2pwUPJztO7u7iSx6WKRIm7w":3,"g5a-risk:CVE-2020-0601":243},{"success":4,"data":5,"meta":241},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":27,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":94,"references":95,"referencesCount":117,"weaknesses":118,"weaknessesCount":127,"isActivelyExploited":4,"cisaInfo":128,"otxData":27,"relatedBlogPosts":130,"seoMetadata":131,"configurations":156,"relatedVendorCves":239,"notableEvents":240},"CVE-2020-0601","What is CVE-2020-0601?","A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.","A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit...","2020-01-14T23:15:30.207","2025-04-10T16:54:50",8.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":34,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.2,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":39,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":4},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":39,"Authentication":23,"ConfidentialityImpact":40,"IntegrityImpact":40,"AvailabilityImpact":23,"BaseScore":41,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","MEDIUM","PARTIAL",5.8,8.6,4.9,0.89436,[44,44,44,44,44,44,44],"High",[48,53,56,59,62,66,69,72,75,78,81,84,87,91],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"microsoft","windows_10_1507","-","cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*",{"vendor":49,"product":54,"version":51,"criteria":55,"vulnerable":4},"windows_10_1607","cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",{"vendor":49,"product":57,"version":51,"criteria":58,"vulnerable":4},"windows_10_1709","cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*",{"vendor":49,"product":60,"version":51,"criteria":61,"vulnerable":4},"windows_10_1803","cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*",{"vendor":49,"product":63,"version":64,"criteria":65,"vulnerable":4},"windows_10_1809","*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",{"vendor":49,"product":67,"version":51,"criteria":68,"vulnerable":4},"windows_10_1903","cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*",{"vendor":49,"product":70,"version":51,"criteria":71,"vulnerable":4},"windows_10_1909","cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:arm64:*",{"vendor":49,"product":73,"version":51,"criteria":74,"vulnerable":4},"windows_server_1803","cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:*:*",{"vendor":49,"product":76,"version":51,"criteria":77,"vulnerable":4},"windows_server_1903","cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:*:*",{"vendor":49,"product":79,"version":51,"criteria":80,"vulnerable":4},"windows_server_1909","cpe:2.3:o:microsoft:windows_server_1909:-:*:*:*:*:*:*:*",{"vendor":49,"product":82,"version":51,"criteria":83,"vulnerable":4},"windows_server_2016","cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",{"vendor":49,"product":85,"version":51,"criteria":86,"vulnerable":4},"windows_server_2019","cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",{"vendor":88,"product":89,"version":64,"criteria":90,"vulnerable":4},"golang","go","cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",{"vendor":49,"product":92,"version":51,"criteria":93,"vulnerable":4},"windows","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",14,[96,102,105,111,113,115],{"url":97,"source":98,"tags":99},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F155960\u002FCurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html","Packetstormsecurity",[100,101],"Third Party Advisory","VDB Entry",{"url":103,"source":98,"tags":104},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F155961\u002FCurveBall-Microsoft-Windows-CryptoAPI-Spoofing-Proof-Of-Concept.html",[100,101],{"url":106,"source":107,"tags":108},"https:\u002F\u002Fportal.msrc.microsoft.com\u002Fen-US\u002Fsecurity-guidance\u002Fadvisory\u002FCVE-2020-0601","Microsoft",[109,110],"Patch","Vendor Advisory",{"url":97,"source":98,"tags":112},[100,101],{"url":103,"source":98,"tags":114},[100,101],{"url":106,"source":107,"tags":116},[109,110],6,[119],{"id":120,"name":121,"description":122,"extendedDescription":123,"status":124,"abstraction":125,"structure":126},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.","Draft","Base","Simple",1,{"shortDescription":129,"requiredAction":129,"vulnerabilityName":129,"dateAdded":27},"",[],{"title":132,"metaDescription":133,"keywords":134,"canonicalUrl":135,"structuredData":136},"What is CVE-2020-0601? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-0601, a high severity cyber security vulnerability from 2020. High exploit probability (89.4%). A spoofing vulnerability e...","CVE-2020-0601, CVE-2020-0601 vulnerability, CVE-2020-0601 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, microsoft security, windows_10_1507 vulnerability, windows_10_1607 vulnerability, windows_10_1709 vulnerability, windows_10_1803 vulnerability, windows_10_1809 vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2020-0601",{"@context":137,"@type":138,"headline":132,"description":133,"datePublished":10,"dateModified":11,"author":139,"publisher":143,"about":147,"mainEntityOfPage":151,"articleSection":154,"keywords":155},"https:\u002F\u002Fschema.org","TechArticle",{"@type":140,"name":141,"url":142},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":140,"name":141,"url":142,"logo":144},{"@type":145,"url":146},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":148,"name":6,"description":149,"additionalType":150},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":152,"@id":153},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-0601","Cybersecurity","CVE-2020-0601, CVE-2020-0601 vulnerability, CVE-2020-0601 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[157,222],{"Operator":27,"Negate":27,"Nodes":158},[159],{"Operator":160,"Negate":27,"CPEMatch":161},"OR",[162,164,167,169,172,174,177,180,182,185,188,190,193,196,198,201,204,206,209,212,214,216,218,220],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":163,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A045AC0A-471E-444C-B3B0-4CABC23E8CFB",{"Vulnerable":4,"Criteria":165,"MatchCriteriaID":166,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*","28A7FEE9-B473-48A0-B0ED-A5CC1E44194C",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":168,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5E491E46-1917-41FE-8F9A-BB0BDDEB42C3",{"Vulnerable":4,"Criteria":170,"MatchCriteriaID":171,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*","0A1BC97A-263E-4291-8AEF-02EE4E6031E9",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":173,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"555C22C7-356D-4DA7-8CED-DA7423BBC6CF",{"Vulnerable":4,"Criteria":175,"MatchCriteriaID":176,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:*","469F95D3-ABBB-4F1A-A000-BE0F6BD60FF6",{"Vulnerable":4,"Criteria":178,"MatchCriteriaID":179,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x86:*","D76003FB-EE99-4D8E-B6A0-B13C2041E5A0",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":181,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"40151476-C0FD-4336-8194-039E8827B7C8",{"Vulnerable":4,"Criteria":183,"MatchCriteriaID":184,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*","D82F8AF7-ED01-4649-849E-F248F0E02384",{"Vulnerable":4,"Criteria":186,"MatchCriteriaID":187,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:*","C1CFB53B-B17B-47BD-BAC1-C6C5D168FFB6",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":189,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"251E413C-68F6-43C6-975C-C0B6AD4D36DD",{"Vulnerable":4,"Criteria":191,"MatchCriteriaID":192,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*","4C3391B0-C6A6-4F6F-AC1B-AD0927C2C986",{"Vulnerable":4,"Criteria":194,"MatchCriteriaID":195,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*","112871CE-B37B-454E-AC10-A285D92CCE0E",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":197,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9E1ED169-6F03-4BD5-B227-5FA54DB40AD7",{"Vulnerable":4,"Criteria":199,"MatchCriteriaID":200,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:*","5C5B5180-1E12-45C2-8275-B9E528955307",{"Vulnerable":4,"Criteria":202,"MatchCriteriaID":203,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:*","B6A0DB01-49CB-4445-AFE8-57C2186857BA",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":205,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9285A9B5-4759-43E7-9589-CDBCA7100605",{"Vulnerable":4,"Criteria":207,"MatchCriteriaID":208,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x64:*","0D77EA14-F61D-4B9E-A385-70B88C482116",{"Vulnerable":4,"Criteria":210,"MatchCriteriaID":211,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x86:*","1A6FC9EE-D486-4AFE-A20E-4278468A1779",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":213,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"37097C39-D588-4018-B94D-5EB87B1E3D5A",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":215,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"530DF8C9-467C-4F4F-9FCA-CDD934BADF3C",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":217,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"ADE7E7B1-64AC-4986-A50B-0918A42C05BB",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":219,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":221,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DB79EE26-FC32-417D-A49C-A1A63165A968",{"Operator":223,"Negate":27,"Nodes":224},"AND",[225,235],{"Operator":160,"Negate":27,"CPEMatch":226},[227,231],{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":228,"VersionStartExcluding":27,"VersionStartIncluding":229,"VersionEndExcluding":230,"VersionEndIncluding":27},"CA6E96C9-FEC1-4174-AB7D-783DF8EC2097","1.12","1.12.16",{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":232,"VersionStartExcluding":27,"VersionStartIncluding":233,"VersionEndExcluding":234,"VersionEndIncluding":27},"9C8D6C09-AF12-4600-9C21-4F7A46CC78D8","1.13","1.13.7",{"Operator":160,"Negate":27,"CPEMatch":236},[237],{"Vulnerable":27,"Criteria":93,"MatchCriteriaID":238,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[],{"lastModified":11,"cacheTime":242,"version":37},1792252406953,{"score":244,"band":46,"action":245,"scoredAt":246},80,"Emergency patch","2026-10-16T06:47:41.02388+00:00"]