Package Analytics affected by Windows TCP/IP vulnerability
Microsoft disclosed a critical vulnerability in the way ICMPv6 Router Advertisement packets are handled on Windows 10 and Windows Server 2019. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client. To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-16898US | medium5.8 | Exploit | ||
<p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vu… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- MitigationPackage Analytics
If you find yourself in a situation where an update is not doable. Microsoft advises the following workarounds: <br /> **Disable ICMPv6 RDNSS**: The following workaround may be helpful in your situation. In all cases, Microsoft strongly recommends that you install the updates for this vulnerability as soon as they become available even if you plan to leave this workaround in place: You can check your \*INTERFACENUMBER\* by running this command in a cmd: ```cmd route print ``` You can disable ICMPv6 RDNSS, to prevent attackers from exploiting the vulnerability, with the PowerShell command below. This workaround is only available for Windows 1709 and above. See What's new in Windows Server 1709 for more information. ```powershell netsh int ipv6 set int *INTERFACENUMBER* rabaseddnsconfig=disable ``` **Note:** No reboot is needed after making the change. <br /> You can disable the workaround with the PowerShell command below. ```powershell netsh int ipv6 set int *INTERFACENUMBER* rabaseddnsconfig=enable ``` **Note:** No reboot is needed after disabling the workaround. <br /> Package Analytics has been verified to function without any issue and is compatible with the prescribed Microsoft update. No additional PA patches are necessary.
- FixedPackage Analytics
This issue is addressed in the Microsoft update for CVE-2020-16898.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan