CVE-2020-0609: vulnerability in Microsoft Windows Server
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
72Vexday Risk Score
Prioritize patching. It exploitation observed in the wild and has a public proof of concept.
ssvc Actepss 78%
from disclosure to weapon7 days
Published on NVDJan 14
1st PoC+7d
Observed exploitationJan 14
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610.
Affected products
Microsoft · Windows Serverpublic PoCs found — 8
exploitdbwww.exploit-db.com/exploits/47964unverifiedexploitdbwww.exploit-db.com/exploits/47963unverifiedgithubgithub.com/ly4k/BlueGate★ 250githubgithub.com/ioncodes/BlueGate★ 78githubgithub.com/MalwareTech/RDGScanner★ 69githubgithub.com/ruppde/rdg_scanner_cve-2020-0609★ 39githubgithub.com/Archi73ct/CVE-2020-0609★ 2githubgithub.com/Bhanunamikaze/BlueGate-CVE-2020-0609★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Microsoft Windows Server
In the same product, most dangerous first.