CVE-2020-1118

Katalog CVE

CVSS 8.6 · High EPSS 15,0%

Kerentanan pada microsoft windows 10, microsoft windows server 2019. Skor CVSS 3.1 8.6 (High) menurut microsoft.com.

Deskripsi (NVD)

A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, a remote unauthenticated attacker could send a specially crafted request to a target system utilizing TLS 1.2 or lower, triggering the system to automatically reboot. The update addresses the vulnerability by changing the way TLS key exchange messages are validated.

Rincian

Terbit di NVD

21 Mei 2020

Terakhir diubah

19 Agustus 2026

Status NVD

Modified

CVSS 3.1

8.6 (High), sumber microsoft.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

15,0% peluang dieksploitasi; lebih tinggi dari 96,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1118 patch · advisory vendor
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1118