CVE-2020-0609
72Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actepss 75%
from disclosure to weapon7 days
Published on NVDJan 14
1st PoC+7d
VulnCheckJan 14
exploitation probability
75%top 1% of all CVEs
observed exploitation
yesVulnCheck
7 public exploit(s)
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610.
Affected products
Microsoft · Windows Serverpublic PoCs found — 7
exploitdbwww.exploit-db.com/exploits/47964unverifiedexploitdbwww.exploit-db.com/exploits/47963unverifiedgithubgithub.com/ly4k/BlueGate★ 249githubgithub.com/ioncodes/BlueGate★ 78githubgithub.com/MalwareTech/RDGScanner★ 68githubgithub.com/ruppde/rdg_scanner_cve-2020-0609★ 40githubgithub.com/Archi73ct/CVE-2020-0609★ 2⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.