CVE-2020-1350
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
91.4%
99.8th percentile
CISA KEV
Listed
Added 2021-11-03 · patch by 2022-05-03
Weakness / dates
—
Published — · modified —
Timeline
- 2021-11-03 — Added to CISA KEV (actively exploited)
- 2022-05-03 — CISA patch-by deadline
Description
Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.