Microsoft Releases Patches For Critical Windows TCP/IP and Other Bugs
60
CVE-2020-16898
—CVSS 3.1
8.8 high
EPSS
11%p96
Published
()
Modified
Description
A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client. To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer. The update addresses the vulnerability by correcting how the Windows TCP/IP stack handles ICMPv6 Router Advertisement packets.
- Vendors
- microsoft
- Products
- windows 10, windows server 2016, windows server 2019
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news7 stories
60
60
60
October 2020 Patch Tuesday: Microsoft fixes potentially wormable Windows TCP/IP RCE flaw
60
47
35