PT-2020-4249 · Microsoft · Windows Tcp/Ip Stack+1

Published 2020-10-13 · Updated 2024-08-29 · CVE-2020-16898

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Windows TCP/IP stack (affected versions not specified)

Description: A remote code execution issue exists due to improper handling of ICMPv6 Router Advertisement packets by the Windows TCP/IP stack. This allows an attacker to execute arbitrary code on a target server or client by sending specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer.

Recommendations: To resolve the issue, update the Windows TCP/IP stack to the latest version that correctly handles ICMPv6 Router Advertisement packets. As a temporary workaround, consider restricting access to the Windows TCP/IP stack to minimize the risk of exploitation. Avoid using the ICMPv6 Router Advertisement packets in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2020-04709

CVE-2020-16898

Affected Products

Windows

Windows Tcp/Ip Stack

References · 40

• 🔥 https://github.com/advanced-threat-research/CVE-2020-16898 · Exploit
• 🔥 https://github.com/momika233/CVE-2020-16898-exp · Exploit
• 🔥 https://github.com/ZephrFish/CVE-2020-16898 · Exploit
• 🔥 https://github.com/0xeb-bp/cve-2020-16898 · Exploit
• 🔥 https://github.com/komomon/CVE-2020-16898--EXP-POC · Exploit
• 🔥 https://github.com/jiansiting/cve-2020-16898 · Exploit
• 🔥 https://github.com/corelight/CVE-2020-16898 · Exploit
• 🔥 https://github.com/komomon/CVE-2020-16898-EXP-POC · Exploit
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/658064 · Security Note
• https://bdu.fstec.ru/vul/2020-04709 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-16898 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16898 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-16898 · Security Note
• https://osv.dev/vulnerability/CVE-2020-16898 · Vendor Advisory