PT-2020-1616 · Microsoft · Sql Server Reporting Services+1

Published 2020-02-11 · Updated 2025-12-03 · CVE-2020-0618

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server Reporting Services versions 2012 through 2016

Description A remote code execution issue exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. This could allow an attacker to execute code in the context of the Report Server service account. The vulnerability is related to insufficient input validation. An attacker who successfully exploited this vulnerability could execute arbitrary code.

Recommendations For Microsoft SQL Server Reporting Services versions 2012 through 2016, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the Report Server service to minimize the risk of exploitation. Avoid using the vulnerable component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

CWE-20

Related Identifiers

BDU:2020-00821

CVE-2020-0618

Affected Products

Sql Server Reporting Services

Sql Server

References · 41

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ssrs_navcorrector_viewstate.rb · Exploit
• 🔥 https://github.com/euphrat1ca/CVE-2020-0618 · Exploit
• 🔥 https://github.com/wortell/cve-2020-0618 · Exploit
• 🔥 http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html · Exploit
• 🔥 https://exploit-db.com/exploits/48816 · Exploit
• 🔥 http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-0618 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618 · Vendor Advisory
• https://bdu.fstec.ru/vul/CVE-2020-0618 · Security Note
• https://bdu.fstec.ru/vul/2020-00821 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-0618 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/644662 · Security Note
• https://osv.dev/vulnerability/CVE-2020-0618 · Vendor Advisory
• https://t.me/ckure/3580 · Telegram Post
• https://twitter.com/inthewildio/status/1843690605870031113 · Twitter Post