Back to Database
Status published
High
CVE-2020-8884
rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly...
Vulnerability Description
rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated users to execute arbitrary code as SYSTEM because of improper deserialization over named pipes.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-8884
Credits & Attribution
No credits recorded in the NVD database.
References
More from proofpoint
View All →CVE-2023-0090
Proofpoint Enterprise Protection webservices unauthenticated RCE
Critical
9.8
CVE-2023-0089
Proofpoint Enterprise Protection webutils authenticated RCE
High
8.8
CVE-2022-46333
Proofpoint Enterprise Protection perl eval() arbitrary command execution
High
7.2
CVE-2022-46332
Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names"
Critical
9.6
CVE-2022-25294
Proofpoint Insider Threat Management Agent for Windows relies on an...
High
7.8
Affected Vendor
proofpoint
View all reports →Affected Software
insider threat management
Vulnerable Versions:
6.3, 7.5.0, 7.6.0, 7.7.0, 7.8.0
Timeline
Official Publish:
January 6th, 2021
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.