CVE-2020-0610
CRITICAL EXPLOITED RANSOMWAREWindows Server 2012, 2016, 2019 - Unauthenticated Remote Code Execution via RD Gateway
Title source: llmExploitation Summary
CVE-2020-0610 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns. EIP tracks 6 public exploits from researchers including ollypwn, ImBIOS, mrlayle.
AI-analyzed exploit summary This exploit targets CVE-2020-0610, a DoS vulnerability in the Windows Remote Desktop Gateway (RD Gateway) by sending malformed DTLS packets. It establishes a DTLS connection and sends fragmented packets to trigger a denial-of-service condition.
Description
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0609.
Exploits (6)
This exploit targets CVE-2020-0610, a DoS vulnerability in the Windows Remote Desktop Gateway (RD Gateway) by sending malformed DTLS packets. It establishes a DTLS connection and sends fragmented packets to trigger a denial-of-service condition.
This exploit targets CVE-2020-0610, a DoS vulnerability in the Windows Remote Desktop Gateway (RD Gateway) by sending malformed DTLS packets. The code establishes a DTLS connection and sends fragmented packets to trigger a denial-of-service condition.
This repository provides a comprehensive lab setup guide for CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway. It includes PowerShell scripts for firewall configuration and system validation, along with instructions for testing using Nuclei scanner.
This repository contains functional exploit code for CVE-2020-0610, a Remote Desktop Gateway vulnerability. It includes a DoS exploit (`dos.py`) and a scanner (`check.py`) to detect vulnerable targets.
This repository provides educational materials and PowerShell scripts to demonstrate the setup and validation of CVE-2020-0610, a vulnerability in Windows RD Gateway. It includes scripts to add firewall rules and check system configurations but lacks actual exploit code.
This repository contains a functional Python-based PoC for CVE-2020-0610, which exploits a heap-based out-of-bounds write vulnerability in the RD Gateway service. The exploit includes both a vulnerability scanner and a DoS trigger, leveraging crafted DTLS packets to manipulate fragment IDs and lengths.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H