CVE-2020-0609: Critical severity microsoft windows server vulnerability

Published Jan 14, 2020

Updated

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610.

Affected Software

4 affected components

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0609

Event History

Jan 14, 2020

CVE Published

via MITRE·11:11 PM

Data Sourced

via MITRE·11:11 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-0609?

CVE-2020-0609 has a critical severity rating due to its potential for remote code execution.

How do I fix CVE-2020-0609?

To fix CVE-2020-0609, apply the latest security updates released by Microsoft for affected Windows Server versions.

What systems are affected by CVE-2020-0609?

CVE-2020-0609 affects Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019.

Can CVE-2020-0609 be exploited remotely?

Yes, CVE-2020-0609 can be exploited remotely by an unauthenticated attacker through remote desktop protocol (RDP) connections.

What are the potential impacts of CVE-2020-0609?

The potential impacts of CVE-2020-0609 include unauthorized access, data compromise, and full system control by attackers.