by Kastro
Paper/Archive/CVE-2020-1040

CVE-2020-1040

Microsoft Windows Server — Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

KEV · due 3 MayEPSS 7%public exploitSSVC actCVSS 9.0
critical.is priorityof 100
96
CVSS 9.0 (ADP)9.0 / 10 × 3027.0In CISA KEV+3030.0EPSS percentile 94.4.944 × 2018.9Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.

Affected

ProductAffectedFixed inSource
Windows Server2016–CNA
Windows Server2016 (Core installation)–CNA
Windows Server2008 R2 for x64-based Systems Service Pack 1–CNA
Windows Server2008 R2 for x64-based Systems Service Pack 1 (Core installation)–CNA
Windows Server2012–CNA
Windows Server2012 (Core installation)–CNA
Windows Server2012 R2–CNA
Windows Server2012 R2 (Core installation)–CNA

Scores by source

CISA ADP9.0CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: no · Technical impact: total

References

refportal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1040refnvidia.custhelp.com/app/answers/detail/a_id/5044refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1040kevcisa.gov/known-exploited-vulnerabilities-catalog