CVE-2016-0050

CVSS 3.0: 5.3 medium
EPSS: 18%p97
Published: Feb 10, 2016 · Feb 10, 2016
Modified: Jun 17, 2026

Analyze CVE-2016-0050 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Network Policy Server (NPS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service (RADIUS authentication outage) via crafted requests, aka "Network Policy Server RADIUS Implementation Denial of Service Vulnerability."

Vendors: microsoft

Products: windows server 2008, windows server 2012

Weakness: CWE-20

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (17.9%)

In the news

1 story

Microsoft Patch Tuesday

Cisco TalosFeb 9, 20:59 UTC · Feb 9, 2016VulnerabilityCVE-2016-0060 CVE-2016-0061 CVE-2016-0062+244 · 1 read