⚠ Exploited in the wild
Exploitation observed in the wild. Not yet on CISA KEV.

CVE-2020-0609 — Improper Input Validation in Microsoft Windows Server

CWE-20 — Improper Input Validation26 documents14 sources
Severity
9.8CRITICALNVD
EPSS
89.8%
top 0.43%
CISA KEV
Not in KEV
Exploit
Exploited in wild
Active exploitation observed
Affected products
6
Microsoft Windows ServerMicrosoft Windows Server 2012Msrc Windows Server 2012+3 more
Timeline
PublishedJan 14
Latest updateApr 16

Description

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages6 packages

▶CVEListV5microsoft/windows_server4 versions+3

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-73x6-v3m8-f299: A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target sy↗2022-05-24
▶
GHSA
GHSA-rfqr-xr33-6qpg: A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target sy↗2022-05-24
▶
VulnCheck
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution↗2020
▶
VulnCheck
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution↗2020
▶

💥Exploits & PoCs

2
Exploit-DB
Remote Desktop Gateway - 'BlueGate' Denial of Service (PoC)↗2020-01-23
▶
Exploit-DB
Remote Desktop Gateway - 'BlueGate' Denial of Service (PoC)↗2020-01-23
▶

📋Vendor Advisories

1
Microsoft
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability↗2020-01-14
▶

🕵️Threat Intelligence

16
Trendmicro
Leveraging Data Science to Minimize the Blast Radius of Ransomware Attacks↗2023-03-02
▶
Sentinelone
Egregor↗2022-11-30
▶
Tenable
ContiLeaks: Chats Reveal Over 30 Vulnerabilities Used by Conti Ransomware – How Tenable Can Help↗2022-03-24
▶
Securelist
Kaspersky Security Bulletin 2020-2021. EU statistics↗2021-05-26
▶
Securelist
Kaspersky Security Bulletin 2020-2021. EU statistics↗2021-05-26
▶

📄Research Papers

1
arXiv
CyLens: Towards Reinventing Cyber Threat Intelligence in the Paradigm of Agentic Large Language Models↗2025-04-16
▶