cve.2020-1048 | Detection.FYI

CVE-2020-1048 Exploitation Attempt - Suspicious New Printer Ports - Registry

Aug 12, 2024 · attack.persistence attack.execution attack.defense-evasion attack.t1112 cve.2020-1048 ·
Share on:

Detects changes to the "Ports" registry key with data that includes a Windows path or a file with a suspicious extension. This could be an attempt to exploit CVE-2020-1048 - a Windows Print Spooler elevation of privilege vulnerability.

Read More
Suspicious PrinterPorts Creation (CVE-2020-1048)

Aug 12, 2024 · attack.persistence attack.execution attack.t1059.001 cve.2020-1048 detection.emerging-threats ·
Share on:

Detects new commands that add new printer port which point to suspicious file

Read More