CVE-2020-0610: Critical severity microsoft windows server vulnerability

Published Jan 14, 2020

Updated

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0609.

Affected Software

4 affected components

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0610

Event History

Jan 14, 2020

CVE Published

via MITRE·11:11 PM

Data Sourced

via MITRE·11:11 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-0610?

CVE-2020-0610 is rated as critical due to its ability to allow remote code execution.

How do I fix CVE-2020-0610?

To fix CVE-2020-0610, apply the security update provided by Microsoft for your affected Windows Server version.

Which versions are affected by CVE-2020-0610?

CVE-2020-0610 affects Microsoft Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019.

What type of attack does CVE-2020-0610 describe?

CVE-2020-0610 describes a remote code execution attack that can occur through the Windows Remote Desktop Gateway.

Can CVE-2020-0610 be exploited without authentication?

Yes, CVE-2020-0610 can be exploited by an unauthenticated attacker connecting to the target system.