Cyber Resilience

CVE-2020-0609

Microsoft Windows Server 2012 r2

High EPSS
Published
14 January 2020
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 9.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.75 99.5th percentile
Risk Priority 97 floored blend · peak EPSS

Summary

CVE-2020-0609 is a critical-severity an unspecified weakness vulnerability in Microsoft Windows Server 2012. Its CVSS base score is 9.8 (Critical).

Operationally, ranked in the top 0.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'.…

more

This CVE ID is unique from CVE-2020-0610.

CWE(s)
NVD-CWE-noinfo

Related Threats

Threat-Actor AttributionAI

Crypt32
Critical Vulnerabilities in Microsoft Windows Operating Systems | CISA

Likely ATT&CK TechniquesAI

Techniques this vulnerability likely enables, inferred from its description, weakness type, and attributed-actor tradecraft. Confidence is per-technique.

T1190 Exploit Public-Facing Application Initial Accessconfidence: HIGH
Unauthenticated remote attacker can achieve code execution by sending crafted requests to the exposed RD Gateway service.
attack.mitre.org →
T1210 Exploitation of Remote Services Lateral Movementconfidence: HIGH
The flaw allows exploitation of the Remote Desktop Gateway remote service to gain initial foothold or lateral movement.
attack.mitre.org →
inferred from description + attributed actor TTPs (Crypt32) · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2020-0610Same product: Microsoft Windows Server 2012
CVE-2024-30070Same product: Microsoft Windows Server 2012
CVE-2022-30136Same product: Microsoft Windows Server 2012
CVE-2023-35331Same product: Microsoft Windows Server 2012
CVE-2023-35638Same product: Microsoft Windows Server 2012
CVE-2023-28223Same product: Microsoft Windows Server 2012
CVE-2023-29369Same product: Microsoft Windows Server 2012
CVE-2024-37979Same product: Microsoft Windows Server 2012
CVE-2023-35352Same product: Microsoft Windows Server 2012
CVE-2018-8476Same product: Microsoft Windows Server 2012

Affected Assets

microsoft
windows server 2012
all versions, r2
microsoft
windows server 2016
all versions
microsoft
windows server 2019
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References