CVE-2020-0610

—

CVSS 3.1

9.8 critical

EPSS

68%p99

Published

Jan 14, 2020 (Jan 14, 2020)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0609.

Vendors: microsoft
Products: windows server 2012, windows server 2016, windows server 2019
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (67.6%)

In the news5 stories

January 2020 Patch Tuesday: Microsoft nukes Windows crypto flaw flagged by the NSA

Help Net SecurityJan 19, 12:59 UTC · Jan 19, 2024Vulnerability CVE-2020-0601 CVE-2020-0609 CVE-2020-0610+1 CVEs

Microsoft Patch Tuesday — Jan. 2020: Vulnerability disclosures and Snort coverage

Cisco TalosJan 14, 19:07 UTC · Jan 14, 2020Vulnerability CVE-2020-0601 CVE-2020-0603 CVE-2020-0605+46 CVEs

CVE-2020-0610

In the news5 stories

January 2020 Patch Tuesday: Microsoft nukes Windows crypto flaw flagged by the NSA

FBI alert warns private orgs of Egregor ransomware attacks

Expert released DOS Exploit PoC for Critical Windows RDP Gateway flaws

Update Windows 10 Immediately to Patch a Flaw Discovered by the NSA

Microsoft Patch Tuesday — Jan. 2020: Vulnerability disclosures and Snort coverage