CVE-2020-1986
Secdo: Local authenticated users can cause Windows system crash
Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:) to cause a system crash on every login. This issue affects all versions Secdo for Windows.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Secdo: Local authenticated users can cause Windows system crash
Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:) to cause a system crash on every login. This issue affects all versions Secdo for Windows.
- Record
CVE-2020-1986- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2020-12776
Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:) to cause a system crash on every login. This issue affects all versions Secdo for Windows.
- Record
EUVD-2020-12776- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rvw6-9w8h-8mp7 No score
Improper input validation vulnerability in Secdo allows an authenticated local user with 'create...
Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:) to cause a system crash on every login. This issue affects all versions Secdo for Windows.
- Record
GHSA-rvw6-9w8h-8mp7- Updated
- 2026-11-02
NVD
Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:) to cause a system crash on every login. This issue affects all versions Secdo for Windows.
- Record
CVE-2020-1986- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-1986 is a medium vulnerability (CVSS 5.5) in Paloaltonetworks Secdo, published April 8, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 17th percentile. No source names a fixed version.