CVE-2020-16898

Summary

<p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client.</p> <p>To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer.</p> <p>The update addresses the vulnerability by correcting how the Windows TCP/IP stack handles ICMPv6 Router Advertisement packets.</p>

Affected Software

VendorProductVersion RangeStatus
MicrosoftWindows 10 Version 180310.0.0 < publicationaffected
MicrosoftWindows 10 Version 180910.0.0 < publicationaffected
MicrosoftWindows Server 201910.0.0 < publicationaffected
MicrosoftWindows Server 2019 (Server Core installation)10.0.0 < publicationaffected
MicrosoftWindows 10 Version 190910.0.0 < publicationaffected
MicrosoftWindows Server, version 1909 (Server Core installation)10.0.0 < publicationaffected
MicrosoftWindows 10 Version 1709 for 32-bit Systems10.0.0 < publicationaffected
MicrosoftWindows 10 Version 170910.0.0 < publicationaffected
MicrosoftWindows 10 Version 1903 for 32-bit Systems10.0.0 < publicationaffected
MicrosoftWindows 10 Version 1903 for x64-based Systems10.0.0 < publicationaffected
MicrosoftWindows 10 Version 1903 for ARM64-based Systems10.0.0 < publicationaffected
MicrosoftWindows Server, version 1903 (Server Core installation)10.0.0 < publicationaffected
MicrosoftWindows 10 Version 200410.0.0 < publicationaffected
MicrosoftWindows Server version 200410.0.0 < publicationaffected

Weaknesses

  • Remote Code Execution

ADP Enrichment

CVE Program Container

Additional References

References