Cyber Resilience

CVE-2020-0609

Microsoft Windows Server 2012 r2

High EPSS
Published
14 January 2020
Modified
21 November 2024
Patch / advisory
CVSS Score v3.1 9.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.75 99.5th percentile
Risk Priority 97 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2020-0609 is a critical-severity an unspecified weakness vulnerability in Microsoft Windows Server 2012. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 0.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'.…

more

This CVE ID is unique from CVE-2020-0610.

CWE(s)

Related Threats

Threat-Actor AttributionAI

Crypt32
Critical Vulnerabilities in Microsoft Windows Operating Systems | CISA

CVEs Like This One

CVE-2020-0610Same product: Microsoft Windows Server 2012
CVE-2022-30136Same product: Microsoft Windows Server 2012
CVE-2024-30070Same product: Microsoft Windows Server 2012
CVE-2020-1350Same product: Microsoft Windows Server 2012
CVE-2024-38230Same product: Microsoft Windows Server 2012
CVE-2023-35643Same product: Microsoft Windows Server 2012
CVE-2023-35331Same product: Microsoft Windows Server 2012
CVE-2023-28247Same product: Microsoft Windows Server 2012
CVE-2024-43512Same product: Microsoft Windows Server 2012
CVE-2023-28223Same product: Microsoft Windows Server 2012

Affected Assets

microsoft
windows server 2012
all versions, r2
microsoft
windows server 2016
all versions
microsoft
windows server 2019
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References