CVE-2020-1383: Windows RRAS Service Information Disclosure Vulnerability
An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled, aka 'Windows RRAS Service Information Disclosure Vulnerability'.
Other sources
An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system To exploit this vulnerability, an attacker would need to run a specially crafted application against an RPC server which has Routing and Remote Access enabled. Routing and Remote Access is a non-default configuration; systems without it enabled are not vulnerable. The security update addresses the vulnerability by correcting how the Routing and Remote Access service handles requests.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1383?
CVE-2020-1383 has a severity rating of 'Important' according to Microsoft's guidelines.
How do I fix CVE-2020-1383?
To mitigate CVE-2020-1383, ensure your system is updated with the latest security patches provided by Microsoft.
What systems are affected by CVE-2020-1383?
CVE-2020-1383 affects multiple versions of Microsoft Windows, including Windows 7, 8.1, 10, and various Windows Server editions.
What is the primary impact of CVE-2020-1383?
The primary impact of CVE-2020-1383 is information disclosure, potentially exposing sensitive data to unauthorized users.
Is CVE-2020-1383 remotely exploitable?
Yes, the vulnerability can be potentially exploited remotely if Routing and Remote Access Service (RRAS) is enabled.