by Kastro
Paper/Archive/CVE-2020-0610

CVE-2020-0610

Microsoft Windows Server — A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to…

EPSS 68%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 99.3.993 × 2019.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0609.

Affected

ProductAffectedFixed inSource
Windows Server2019–CNA
Windows Server2016–CNA
Windows Server2012–CNA
Windows Server2012 R2–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refportal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0610