What is CVE-2020-0612?

CVE-2020-0612 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Which CVE IDs does CVE-2020-0612 cover?

CVE-2020-0612 covers the following CVE IDs: CVE-2020-0612. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2020-0612?

CVE-2020-0612 has a CVSS v3 base score of 7.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2020-0612?

CVE-2020-0612 affects 2 products, including: Windows Server 2016; Windows Server 2019.

CVE-2020-0612HighCVSS 7.5

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

January 14, 2020

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2020-0612 →

📋 Description

A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RD Gateway service on the target system to stop responding. To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides RD Gateway services. The update addresses the vulnerability by correcting how RD Gateway handles connection requests.

🎯 Affected products2

Windows Server 2016
Windows Server 2019

✅ Remediation

KB4534273 (Security Update) KB4534271 (Security Update)

🔗 References (5)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-0612
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4534273
referencehttps://support.microsoft.com/help/4534273
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4534271
referencehttps://support.microsoft.com/help/4534271