CVE-2020-0610

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0609.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

67.57% chance of exploitation in the next 30 days, 99th percentile

Published

2020-01-14

Updated

2024-08-04

Proof-of-concept exploits (1)

• ioncodes/BlueGate78★ · 2020-01-31

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/47964
• https://www.exploit-db.com/exploits/47963

References

• CVE Record
• NVD entry

Related

• CVE-2020-0601
• CVE-2020-0609
• CVE-2020-16938
• CVE-2020-0618
• CVE-2020-0624
• CVE-2020-0568