CVE-2020-0796: Microsoft SMBv3 Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.
Other sources
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.
— CISA
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-0796?
CVE-2020-0796 is rated as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2020-0796?
To fix CVE-2020-0796, ensure that your Windows systems are updated with the latest security patches provided by Microsoft.
Which software versions are affected by CVE-2020-0796?
CVE-2020-0796 affects Microsoft Windows 10 versions 1903 and 1909, as well as Windows Server 2016 versions 1903 and 1909.
What type of vulnerability is CVE-2020-0796?
CVE-2020-0796 is classified as a remote code execution vulnerability within the SMBv3 protocol.
Can CVE-2020-0796 be exploited remotely?
Yes, CVE-2020-0796 can be exploited remotely, allowing attackers to execute arbitrary code on affected systems.