Microsoft Windows Remote Desktop Gateway allows for unauthenticated remote code execution

ronjor · Jan 14, 2020

Vulnerability Note VU#491944
Original Release Date: 2020-01-14 | Last Revised: 2020-01-14

Overview
Microsoft Windows Remote Desktop Gateway contains vulnerabilities that may allow a remote, unauthenticated attacker to execute arbitrary code with SYSTEM privileges on a vulnerable system.
Solution
Apply an update
This issue is addressed in the Microsoft updates for CVE-2020-0609 and CVE-2020-0610.
Click to expand...

guest · Jan 27, 2020

PoC Exploits Created for Recently Patched 'BlueGate' Windows Server Flaws
January 27, 2020
https://www.securityweek.com/poc-exploits-created-recently-patched-bluegate-windows-server-flaws

The flaws, tracked as CVE-2020-0610 and CVE-2020-0609, affect Windows Server 2012, 2016 and 2019. Microsoft patched them with its January 2020 security updates, which the company released on January 14.

A technical analysis of the vulnerabilities was published just a few days later by researcher Marcus Hutchins and several PoC exploits have now been created.
Hutchins, aka MalwareTech, has made public the source code for a scanner that allows users to check if their servers are vulnerable.

A Denmark-based researcher who uses the online moniker Ollypwn has released a PoC exploit that uses CVE-2020-0609 and CVE-2020-0610 to cause a denial-of-service (DoS) condition. Ollypwn named the vulnerabilities BlueGate.
Click to expand...

Log in or Sign up

Microsoft Windows Remote Desktop Gateway allows for unauthenticated remote code execution

ronjor Global Moderator

guest Guest

Log in or Sign up

Microsoft Windows Remote Desktop Gateway allows for unauthenticated remote code execution

ronjor Global Moderator

guest Guest

Useful Searches