CVE-2020-1466 HIGH

CVE-2020-1466: Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Vendor Microsoft
Product Windows Server 2019
Published August 17, 2020
Last update October 1, 2024

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

What the vulnerability does

01Description

A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RD Gateway service on the target system to stop responding. To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides RD Gateway services. The update addresses the vulnerability by correcting how RD Gateway handles connection requests.

Key dates

02Disclosure timeline

August 17, 2020 CVE published
October 1, 2024 Record updated