Vulnerability identifier: #VU24291

Vulnerability risk: High

CVSSv3.1: 8.8 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C]

CVE-ID: CVE-2020-0609

CWE-ID: CWE-20

Exploitation vector: Network

Exploits in database: 6

• July 1, 2021
  • rdg_scanner_cve-2020-0609 (Scanning for Remote Desktop Gateways (Potentially unpatched CVE-2020-0609 and CVE-2020-0610)) [Github]
• June 3, 2020
  • BlueGate (PoC (DoS + scanner) for CVE-2020-0609 & CVE-2020-0610 - RD Gateway RCE) [Github]
  • RDGScanner (A proof-of-concept scanner to check an RDG Gateway Server for vulnerabilities CVE-2020-0609 & CVE-2020-0610.) [Github]
  • CVE-2020-0609 () [Github]
  • BlueGate (PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610) [Github]
  • rdg_scanner_cve-2020-0609 (Scanning for Remote Desktop Gateways (Potentially unpatched CVE-2020-0609 and CVE-2020-0610)) [Github]

Impact: Code execution

Vulnerable software:
Windows Server
Operating systems & Components / Operating system

Vendor: Microsoft