CVE-2020-16898

mediumPriorität · verfolgen · 37EPSS 0.109 · 96. PerzentilExploit · PoCDEEURUUS
grimoire priorityP1 · Urgent
Exploitable?
Public exploit
15 exploits · PoC
Likely / severe?
10.9% (96th) EPSS
CVSS 5.8 · medium
Is it mine?
37 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · fstec_bdu · sick_psirt

EPSS · bewertet 2026-10-27

<p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client.</p> <p>To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer.</p> <p>The update addresses the vulnerability by correcting how the Windows TCP/IP stack handles ICMPv6 Router Advertisement packets.</p>

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenPackage Analyticssick_psirt

    This issue is addressed in the Microsoft update for CVE-2020-16898.

    https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898
  • MitigationPackage Analyticssick_psirt

    If you find yourself in a situation where an update is not doable. Microsoft advises the following workarounds: <br /> **Disable ICMPv6 RDNSS**: The following workaround may be helpful in your situation. In all cases, Microsoft strongly recommends that you install the updates for this vulnerability as soon as they become available even if you plan to leave this workaround in place: You can check your \*INTERFACENUMBER\* by running this command in a cmd: ```cmd route print ``` You can disable ICMPv6 RDNSS, to prevent attackers from exploiting the vulnerability, with the PowerShell command below. This workaround is only available for Windows 1709 and above. See What's new in Windows Server 1709 for more information. ```powershell netsh int ipv6 set int *INTERFACENUMBER* rabaseddnsconfig=disable ``` **Note:** No reboot is needed after making the change. <br /> You can disable the workaround with the PowerShell command below. ```powershell netsh int ipv6 set int *INTERFACENUMBER* rabaseddnsconfig=enable ``` **Note:** No reboot is needed after disabling the workaround. <br /> Package Analytics has been verified to function without any issue and is compatible with the prescribed Microsoft update. No additional PA patches are necessary.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–critical · 5.2–9.8

v2.05.8mediumAV:A/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 6.5 · Auswirkung 6.4
v2.05.2mediumAV:A/AC:L/Au:N/C:P/I:P/A:P/E:POCsecondary · CVSS-BT (t0sche)
v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · secure@microsoft.com USAusnutzbarkeit 2.8 · Auswirkung 5.9
v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · SICK PSIRT DE
v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · ENISA EU
v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 5.9
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

04

Exploits (15)

Öffentlicher Proof-of-Concept- und Exploit-Code.

05

betroffene Produkte (37)

Betroffene Produkte und Versionsbereiche.

06

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • SCA-2020-0005Package Analytics affected by Windows TCP/IP vulnerability2020-10-29csaf · sick_psirtDE

    Microsoft disclosed a critical vulnerability in the way ICMPv6 Router Advertisement packets are handled on Windows 10 and Windows Server 2019. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client. To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer.

07

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

veröffentlicht 2020-10-16geändert 2026-08-03
09

Referenzen (9)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan