CVE-2020-0761
HIGHWindows Server 2008, 2012, 2016, 2019 - Authenticated Remote Code Execution in ADIDNS
Title source: llmDescription
<p>A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account</p> <p>To exploit the vulnerability, an authenticated attacker could send malicious requests to an Active Directory integrated DNS (ADIDNS) server.</p> <p>The update addresses the vulnerability by correcting how Active Directory integrated DNS (ADIDNS) handles objects in memory.</p>
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_misc
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0761
Scores
CVSS v3
8.8
EPSS
0.0361
EPSS Percentile
88.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
Status
published
Products (8)
microsoft/windows_server_2008
(2 CPE variants)
microsoft/windows_server_2012
microsoft/windows_server_2012
r2
microsoft/windows_server_2016
microsoft/windows_server_2016
1903
microsoft/windows_server_2016
1909
microsoft/windows_server_2016
2004
microsoft/windows_server_2019
Published
Sep 11, 2020
Tracked Since
Feb 18, 2026