Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2020-16898
HistoryOct 16, 2020 - 11:15 p.m.

CVE-2020-16898

2020-10-1623:15:00
NVD-CWE-noinfo
[email protected]
web.nvd.nist.gov
145
In Wild
14
cve-2020-16898
windows
tcp/ip
remote code execution
vulnerability
icmpv6
router advertisement
nvd

8.8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

80.9%

JSON

<p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client.</p>
<p>To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer.</p>
<p>The update addresses the vulnerability by correcting how the Windows TCP/IP stack handles ICMPv6 Router Advertisement packets.</p>

VendorProductVersionCPE
microsoftwindows_10_180310.0.0cpe:2.3:o:microsoft:windows_10_1803:10.0.0:*:*:*:*:*:*:*
microsoftwindows_10_180910.0.0cpe:2.3:o:microsoft:windows_10_1809:10.0.0:*:*:*:*:*:*:*
microsoftwindows_server_201910.0.0cpe:2.3:o:microsoft:windows_server_2019:10.0.0:*:*:*:*:*:*:*
microsoftwindows_server_201910.0.0cpe:2.3:o:microsoft:windows_server_2019:10.0.0:*:*:*:*:*:*:*
microsoftwindows_10_190910.0.0cpe:2.3:o:microsoft:windows_10_1909:10.0.0:*:*:*:*:*:*:*
microsoftwindows_server,_version_190910.0.0cpe:2.3:o:microsoft:windows_server,_version_1909:10.0.0:*:*:*:*:*:*:*
microsoftwindows_10_1709 for 32-bit systems10.0.0cpe:2.3:o:microsoft:windows_10_1709 for 32-bit systems:10.0.0:*:*:*:*:*:*:*
microsoftwindows_10_170910.0.0cpe:2.3:o:microsoft:windows_10_1709:10.0.0:*:*:*:*:*:*:*
microsoftwindows_10_1903 for 32-bit systems10.0.0cpe:2.3:o:microsoft:windows_10_1903 for 32-bit systems:10.0.0:*:*:*:*:*:*:*
microsoftwindows_10_1903 for x64-based systems10.0.0cpe:2.3:o:microsoft:windows_10_1903 for x64-based systems:10.0.0:*:*:*:*:*:*:*
Rows per page:
1-10 of 141

Social References

More

Related

cisa 1
qualysblog 3
githubexploit 11
checkpoint_advisories 1
prion 1
mscve 1
trellix 2
rapid7blog 3
krebs 1
attackerkb 2
thn 1
threatpost 1
avleonov 1
nessus 5
mskb 5
kaspersky 1
cisa
cisa
Microsoft Addresses Windows TCP/IP RCE/DoS Vulnerability
2020-10-14 00:00:00
qualysblog
qualysblog
Microsoft Windows TCP/IP Remote Code Execution Vulnerability (CVE-2020-16898) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®
2020-10-14 20:28:33
October 2020 Patch Tuesday – 87 Vulnerabilities, 11 Critical, SharePoint, TCP/IP Stack, Graphics, Adobe Vulns
2020-10-13 18:52:03
Mitigating the Risk of Zero-Day Vulnerabilities by using Compensating Controls
2022-08-23 10:46:04
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2020-10-14 03:25:00
Exploit for Vulnerability in Microsoft
2020-10-16 23:03:15
Exploit for Vulnerability in Microsoft
2020-10-16 06:27:24
checkpoint_advisories
checkpoint_advisories
Microsoft Windows TCP/IP Remote Code Execution (CVE-2020-16898)
2020-10-13 00:00:00
prion
prion
Remote code execution
2020-10-16 23:15:00
mscve
mscve
Windows TCP/IP Remote Code Execution Vulnerability
2020-10-13 07:00:00
trellix
trellix
CVE-2020-16898: Bad Neighbor | McAfee Blogs
2020-10-13 00:00:00
CVE-2020-16898: Bad Neighbor | McAfee Blogs
2020-10-13 00:00:00
rapid7blog
rapid7blog
There Goes The Neighborhood: Dealing With CVE-2020-16898 (and CVE-2020-1656) (aka"Bad Neighbor")
2020-10-14 02:38:11
Trick or Treat! What We Can Learn from the Spookiest Vulnerabilities of the Year
2020-10-29 13:59:06
Patch Tuesday - October 2020
2020-10-13 23:25:39
krebs
krebs
Microsoft Patch Tuesday, October 2020 Edition
2020-10-13 20:10:36
attackerkb
attackerkb
CVE-2020-16898 aka Bad Neighbor / Ping of Death Redux
2020-10-16 00:00:00
CVE-2020-16952 — Microsoft SharePoint Remote Code Execution Vulnerabilities
2020-10-16 00:00:00
thn
thn
Microsoft Releases Patches For Critical Windows TCP/IP and Other Bugs
2020-10-14 10:10:00
threatpost
threatpost
October Patch Tuesday: Microsoft Patches Critical, Wormable RCE Bug
2020-10-13 20:44:01
avleonov
avleonov
Vulristics Vulnerability Score, Automated Data Collection and Microsoft Patch Tuesdays Q4 2020
2021-01-11 01:50:44
nessus
nessus
KB4580328: Windows 10 Version 1709 October 2020 Security Update
2020-10-13 00:00:00
KB4577668: Windows 10 Version 1809 and Windows Server 2019 October 2020 Security Update
2020-10-13 00:00:00
KB4577671: Windows 10 Version 1903 and Windows 10 Version 1909 October 2020 Security Update
2020-10-13 00:00:00
mskb
mskb
October 13, 2020—KB4577668 (OS Build 17763.1518) - EXPIRED
2020-10-13 07:00:00
October 13, 2020—KB4580328 (OS Build 16299.2166)
2020-10-13 07:00:00
October 13, 2020—KB4580330 (OS Build 17134.1792) - EXPIRED
2020-10-13 07:00:00
kaspersky
kaspersky
KLA11977 Multiple vulnerabilities in Microsoft Windows
2020-10-13 00:00:00

8.8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

80.9%

JSON
Related for CVE-2020-16898
cisa1qualysblog3githubexploit11checkpoint_advisories1prion1mscve1trellix2rapid7blog3krebs1attackerkb2thn1threatpost1avleonov1nessus5mskb5kaspersky1