CVE-2020-0609
CRITICAL EXPLOITED IN THE WILD RANSOMWAREWindows Server 2012, 2016, 2019 - Unauthenticated Remote Code Execution via RD Gateway
Title source: llmExploitation Summary
CVE-2020-0609 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io), including in ransomware campaigns. EIP tracks 9 public exploits from researchers including ly4k, ioncodes, MalwareTech.
AI-analyzed exploit summary This repository contains a Python-based PoC for CVE-2020-0609, which exploits a heap out-of-bounds write vulnerability in the RD Gateway service. It includes both a vulnerability scanner and a DoS exploit.
Description
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610.
Exploits (9)
This repository contains a Python-based PoC for CVE-2020-0609, which exploits a heap out-of-bounds write vulnerability in the RD Gateway service. It includes both a vulnerability scanner and a DoS exploit.
This repository contains a PoC for CVE-2020-0609, a vulnerability in Remote Desktop Gateway (RD Gateway) that allows for denial of service (DoS) attacks. The PoC includes a scanner to check for vulnerability and a DoS exploit that crashes the RD Gateway service by sending malformed DTLS packets.
This is a proof-of-concept scanner for CVE-2020-0609 and CVE-2020-0610, which checks an RDP Gateway Server for vulnerabilities by sending a crafted DTLS packet and analyzing the response. It does not exploit the vulnerability but detects its presence.
This repository contains a scanner for detecting Remote Desktop Gateways potentially vulnerable to CVE-2020-0609 and CVE-2020-0610. It includes functionality to check for vulnerable systems via UDP 3391 and HTTPS on TCP 443.
This PoC exploits CVE-2020-0609, a DoS vulnerability in Microsoft Windows Remote Desktop Gateway (RDG) by sending malformed UDP packets over DTLS. The exploit causes the RDG service to crash by overwhelming it with fragmented packets.
This repository contains a functional Python-based PoC for CVE-2020-0609, which exploits a heap-based out-of-bounds write vulnerability in the RD Gateway service. The exploit includes both a vulnerability scanner and a DoS trigger, leveraging crafted DTLS packets to manipulate fragment IDs and lengths.
This repository contains functional exploit code for CVE-2020-0609, a vulnerability in Remote Desktop Gateway. It includes a DoS exploit and a scanner to check for vulnerability. The PoC uses a patched version of PyDTLS to craft malicious DTLS packets.
This exploit demonstrates a DoS vulnerability in the DTLS implementation of the target software by sending malformed CONNECT_PKT_FRAGMENT packets. It establishes a DTLS connection and repeatedly sends crafted packets to trigger the vulnerability.
This exploit demonstrates a DoS vulnerability in the DTLS implementation of the target software by sending malformed CONNECT_PKT_FRAGMENT packets. It establishes a DTLS connection and repeatedly sends crafted packets to trigger the vulnerability.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H