CVE-2020-0609

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system…

published January 14, 2020

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.

CVSS
—
EPSS
78%
Percentile
99.6
In the wild
Unconfirmed
What it is

🚨 An unauthenticated attacker can send malicious requests to the Windows Remote Desktop Gateway, potentially pulling off remote code execution with ease! ⚡ Think of it like a guest at a hotel who bypasses the check-in process to access any room they want without any credentials — a major breach of security! 🏨 If exploited, this vulnerability could allow attackers to completely control affected systems — imagine they could read confidential data, install malware, or even take over the entire network. That's a nightmare waiting to happen! 🔥

Put simply

Think of it like a guest at a hotel who bypasses the check-in process to access any room they want without any credentials — a major breach of security! 🏨 This vulnerability in Windows Remote Desktop Gateway allows unauthenticated attackers to execute arbitrary code by sending specially crafted requests over RDP, which can lead to unauthorized access and control of the system.

What to do

If exploited, this vulnerability could allow attackers to completely control affected systems — imagine they could read confidential data, install malware, or even take over the entire network. That's a nightmare waiting to happen! 🔥 It's essential to implement network-level authentication for your RD Gateway, and ensure all systems are updated with the latest security patches. Regularly audit your exposure and access controls to minimize risks. You've got this! With the right precautions, you can keep your systems safe and secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.77679 · 99.6th percentile
Published
2020-01-14T23:11Z
EPSS history
Timeline
  • 14 JAN 23:11Z
    A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system…
    cvelistv5