PT-2020-4255 · Microsoft · Windows Remote Desktop Services+1

Published 2020-10-13 · Updated 2023-12-31 · CVE-2020-16863

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Service (affected versions not specified)

Description: A denial of service issue exists due to insufficient input validation in the Windows Remote Desktop Service. This can be exploited by a remote attacker using a specially crafted application to cause the service to stop responding. The attacker must connect to the target system using RDP and send specially crafted requests to exploit this issue.

Recommendations: To resolve the issue, apply the update that corrects how Remote Desktop Service handles connection requests. As a temporary workaround, consider restricting access to the Remote Desktop Service to minimize the risk of exploitation. Avoid using specially crafted requests in the RDP connection until the issue is resolved.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-04715

CVE-2020-16863

Affected Products

Windows

Windows Remote Desktop Services

References · 8

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-16863 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16863 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04715 · Security Note
• https://osv.dev/vulnerability/CVE-2020-16863 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16863 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-16863 · Security Note
• https://t.me/cibsecurity/15350 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2020101358 · Note