CVE-2020-0609 - A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'

Back Back to CVE browser

CRITICAL

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'

Published Jan 14, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 77.68%

Description

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610.

Affected products

Vendor Microsoft Product Windows Server Default
n/a
- Version
  2012
  Status
  affected
  Constraints
  -
- Version
  2012 R2
  Status
  affected
  Constraints
  -
- Version
  2016
  Status
  affected
  Constraints
  -
- Version
  2019
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows Server

n/a

Version	Status	Constraints
2012	affected	-
2012 R2	affected	-
2016	affected	-
2019	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (1)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0609
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0609		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Jan 14, 2020

Updated Aug 4, 2024

Reserved Nov 4, 2019

Link CVE-2020-0609

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-0609

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-0609