by Kastro
Paper/Archive/CVE-2020-1350

CVE-2020-1350

Microsoft Windows Server — Microsoft Windows DNS Server Remote Code Execution Vulnerability

KEV · due 3 MayEPSS 97%public exploitSSVC actCVSS 10.0
critical.is priorityof 100
100
CVSS 10.0 (ADP)10.0 / 10 × 3030.0In CISA KEV+3030.0EPSS percentile 99.9.999 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

Affected

ProductAffectedFixed inSource
Windows Server2019–CNA
Windows Server2019 (Core installation)–CNA
Windows Server2016–CNA
Windows Server2016 (Core installation)–CNA
Windows Server2008 for 32-bit Systems Service Pack 2–CNA
Windows Server2008 for 32-bit Systems Service Pack 2 (Core installation)–CNA
Windows Server2008 for x64-based Systems Service Pack 2–CNA
Windows Server2008 for x64-based Systems Service Pack 2 (Core installation)–CNA
Windows Server2008 R2 for x64-based Systems Service Pack 1–CNA
Windows Server2008 R2 for x64-based Systems Service Pack 1 (Core installation)–CNA
Windows Server2012–CNA
Windows Server2012 (Core installation)–CNA

Scores by source

CISA ADP10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refportal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350refpacketstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.htmlrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1350kevcisa.gov/known-exploited-vulnerabilities-catalog