CVE-2020-1350criticalunder attackCWE-20

CVE-2020-1350: critical vulnerability in Microsoft Windows Server

Published · Updated

Follow this CVE+ Monitor Windows Server+ Monitor Windows

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 10epss 97%
from disclosure to weaponsame day
Published on NVDJul 14
1st PoCMar 11
CISA KEV+477d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

A critical flaw in Windows DNS servers allows attackers to execute malicious code remotely without authentication. This affects any system running vulnerable DNS server software, potentially compromising entire networks.

Technical detail

An improper input validation vulnerability (CWE-20) in Windows DNS Server allows unauthenticated remote attackers to execute arbitrary code via malformed DNS requests. The attack vector is network-based with no authentication required, and successful exploitation grants code execution with SYSTEM privileges on the affected DNS server.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Microsoft · Windows ServerMicrosoft · Windows Server, version 1903 (Server Core installation)Microsoft · Windows Server, version 1909 (Server Core installation)Microsoft · Windows Server, version 2004 (Server Core installation)
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Microsoft Windows Server

In the same product, most dangerous first.

CVE-2019-0708CRITICALCVE-2019-0708EPSS 100.0%KEVCVE-2020-0796CRITICALCVE-2020-0796EPSS 99.8%KEVCVE-2020-1472MEDIUMNetlogon Elevation of Privilege VulnerabilityEPSS 99.4%KEVCVE-2020-0601HIGHCVE-2020-0601EPSS 89.1%KEVCVE-2021-1732HIGHWindows Win32k Elevation of Privilege VulnerabilityEPSS 78.4%KEVCVE-2019-1458HIGHCVE-2019-1458EPSS 74.4%KEV