A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to th…

published 2020-01-14 6 y ago modified 2026-06-17 4 mo ago also EUVD-2020-2105

cvss: 9.8; version 3.1, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 67.6%; EPSS 67.6% chance of exploitation in 30 days, percentile 99.3%
public exploits: 2; Exploit-DB

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0609.

Patch / fix

links 1

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0610 advisory

Timeline

2020-01-14 Published
2020-01-23 First public exploit (EDB-47964)

Exploit prediction

67.57% chance of exploitation in the next 30 days, higher than 99.3% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

EDB-47964 Remote Desktop Gateway - 'BlueGate' Denial of Service (PoC) dos, 2020-01-23
EDB-47963 Remote Desktop Gateway - 'BlueGate' Denial of Service (PoC) dos, 2020-01-23

CVSS scores

assigned by	version	score	vector
NVD	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD	2.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

Microsoft Windows Server

References

portal.msrc.microsoft.com /en-US/security-guidance/advisory/CVE-2020-0610
patch, vendor-advisory

Sources

CVE List CVE-2020-0610
NVD CVE-2020-0610

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary