CVE-2020-0660

HIGH

Windows 10, 8.1, RT 8.1, Server 2012, 2016, 2019 - Denial of Service via Remote Desktop Protocol

Title source: llm

Description

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability'.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0660

Scores

CVSS v3 7.5

EPSS 0.0486

EPSS Percentile 91.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (16)

microsoft/windows_10

microsoft/windows_10 1607

microsoft/windows_10 1709

microsoft/windows_10 1803

microsoft/windows_10 1809

microsoft/windows_10 1903

microsoft/windows_10 1909

microsoft/windows_8.1

microsoft/windows_rt_8.1

microsoft/windows_server_2012

... and 6 more

Published Feb 11, 2020

Tracked Since Feb 18, 2026