Read the docs
TI-2020-12966 Aliases CVE-2020-16980GHSA-c85p-cp3c-gc6c

Windows iSCSI Target Service Elevation of Privilege Vulnerability

Priority LOW 36Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

<p>An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.</p> <p>To exploit the vulnerability, an attacker would first need code execution on a victim system. An attacker could then run a specially crafted application.</p> <p>The security update addresses the vulnerability by ensuring the Windows iSCSI Target Service properly handles file operations.</p>

Why it matters now

EPSS 0.009 59th percentileScored 2026-11-07
Fix Fixed Windows Server 2019 (Microsoft): publicationWindows Server 2019 (Server Core installation) (Microsoft): publication+9 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
MicrosoftWindows Server 201910.0.0 to before publicationpublicationPatch availableCNA
MicrosoftWindows Server 2019 (Server Core installation)10.0.0 to before publicationpublicationPatch availableCNA
MicrosoftWindows Server, version 1909 (Server Core installation)10.0.0 to before publicationpublicationPatch availableCNA
MicrosoftWindows Server, version 1903 (Server Core installation)10.0.0 to before publicationpublicationPatch availableCNA
MicrosoftWindows Server version 200410.0.0 to before publicationpublicationPatch availableCNA
MicrosoftWindows Server 201610.0.0 to before publicationpublicationPatch availableCNA
MicrosoftWindows Server 2016 (Server Core installation)10.0.0 to before publicationpublicationPatch availableCNA
MicrosoftWindows Server 20126.2.0 to before publicationpublicationPatch availableCNA
MicrosoftWindows Server 2012 (Server Core installation)6.2.0 to before publicationpublicationPatch availableCNA
MicrosoftWindows Server 2012 R26.3.0 to before publicationpublicationPatch availableCNA
MicrosoftWindows Server 2012 R2 (Server Core installation)6.3.0 to before publicationpublicationPatch availableCNA
  • Windows Server 2019 VendorMicrosoft Affected 10.0.0 to before publication Fixed in publication Patch available CNA
  • Windows Server 2019 (Server Core installation) VendorMicrosoft Affected 10.0.0 to before publication Fixed in publication Patch available CNA
  • Windows Server, version 1909 (Server Core installation) VendorMicrosoft Affected 10.0.0 to before publication Fixed in publication Patch available CNA
  • Windows Server, version 1903 (Server Core installation) VendorMicrosoft Affected 10.0.0 to before publication Fixed in publication Patch available CNA
  • Windows Server version 2004 VendorMicrosoft Affected 10.0.0 to before publication Fixed in publication Patch available CNA
  • Windows Server 2016 VendorMicrosoft Affected 10.0.0 to before publication Fixed in publication Patch available CNA
  • Windows Server 2016 (Server Core installation) VendorMicrosoft Affected 10.0.0 to before publication Fixed in publication Patch available CNA
  • Windows Server 2012 VendorMicrosoft Affected 6.2.0 to before publication Fixed in publication Patch available CNA
  • Windows Server 2012 (Server Core installation) VendorMicrosoft Affected 6.2.0 to before publication Fixed in publication Patch available CNA
  • Windows Server 2012 R2 VendorMicrosoft Affected 6.3.0 to before publication Fixed in publication Patch available CNA
  • Windows Server 2012 R2 (Server Core installation) VendorMicrosoft Affected 6.3.0 to before publication Fixed in publication Patch available CNA

CPE configurations NVD · 7

CPEVersionsRoleVendor
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*r2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*1903VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*1909VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*2004VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
  • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* Versions r2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:* Versions 1903 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:* Versions 1909 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:* Versions 2004 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft

Remediation

  • Fix · CNA Windows Server 2019 (Microsoft) Fixed in publication
  • Fix · CNA Windows Server 2019 (Server Core installation) (Microsoft) Fixed in publication
  • Fix · CNA Windows Server, version 1909 (Server Core installation) (Microsoft) Fixed in publication
  • Fix · CNA Windows Server, version 1903 (Server Core installation) (Microsoft) Fixed in publication
  • Fix · CNA Windows Server version 2004 (Microsoft) Fixed in publication
  • Fix · CNA Windows Server 2016 (Microsoft) Fixed in publication
  • Fix · CNA Windows Server 2016 (Server Core installation) (Microsoft) Fixed in publication
  • Fix · CNA Windows Server 2012 (Microsoft) Fixed in publication
  • Fix · CNA Windows Server 2012 (Server Core installation) (Microsoft) Fixed in publication
  • Fix · CNA Windows Server 2012 R2 (Microsoft) Fixed in publication
  • Fix · CNA Windows Server 2012 R2 (Server Core installation) (Microsoft) Fixed in publication

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-16980
  2. 2026-10-03 Alias added: GHSA-c85p-cp3c-gc6c

References

Patch 1

  • TI-2025-36863 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-01431 Netlogon Elevation of Privilege Vulnerability KEVCVSS 3.1CRITICAL 10.0
  • TI-2020-01310 Improper input validation in Microsoft Windows Server KEVCVSS 3.1CRITICAL 10.0
  • TI-2017-06077 Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-01465 HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1… KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-01009 Improper input validation in Microsoft Windows Server KEVCVSS 3.1CRITICAL 9.0
See all 5293 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences