CVE-2020-16898
mediumPriorität · verfolgen · 37EPSS 0.109 · 96. PerzentilExploit · PoCDEEURUUSEPSS · bewertet 2026-10-27
<p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client.</p> <p>To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer.</p> <p>The update addresses the vulnerability by correcting how the Windows TCP/IP stack handles ICMPv6 Router Advertisement packets.</p>
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenPackage Analyticssick_psirt
This issue is addressed in the Microsoft update for CVE-2020-16898.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898 - MitigationPackage Analyticssick_psirt
If you find yourself in a situation where an update is not doable. Microsoft advises the following workarounds: <br /> **Disable ICMPv6 RDNSS**: The following workaround may be helpful in your situation. In all cases, Microsoft strongly recommends that you install the updates for this vulnerability as soon as they become available even if you plan to leave this workaround in place: You can check your \*INTERFACENUMBER\* by running this command in a cmd: ```cmd route print ``` You can disable ICMPv6 RDNSS, to prevent attackers from exploiting the vulnerability, with the PowerShell command below. This workaround is only available for Windows 1709 and above. See What's new in Windows Server 1709 for more information. ```powershell netsh int ipv6 set int *INTERFACENUMBER* rabaseddnsconfig=disable ``` **Note:** No reboot is needed after making the change. <br /> You can disable the workaround with the PowerShell command below. ```powershell netsh int ipv6 set int *INTERFACENUMBER* rabaseddnsconfig=enable ``` **Note:** No reboot is needed after disabling the workaround. <br /> Package Analytics has been verified to function without any issue and is compatible with the prescribed Microsoft update. No additional PA patches are necessary.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–critical · 5.2–9.8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (15)
Öffentlicher Proof-of-Concept- und Exploit-Code.
- 0xeb-bp/cve-2020-16898PoC BSOD for CVE-2020-16898 (badneighbor)PoC · poc_in_github
- Q1984/CVE-2020-16898PoC Bad Neighbor BSOD exploitPoC · poc_in_github
betroffene Produkte (37)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- SCA-2020-0005Package Analytics affected by Windows TCP/IP vulnerability2020-10-29csaf · sick_psirtDE
Microsoft disclosed a critical vulnerability in the way ICMPv6 Router Advertisement packets are handled on Windows 10 and Windows Server 2019. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client. To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (9)
Externe Belege — Patches, Meldungen, Analysen.
- http://www.nsfocus.net/vulndb/49927cnnvd
- https://media.cert.europa.eu/static/SecurityAdvisories/2020/CERT-EU-SA2020-048.pdfcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-16898cnnvd
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898cnnvd
- https://portal.msrc.microsoft.com/en-us/security-guidancePatchcnnvd
- https://portal.msrc.microsoft.com/zh-CN/security-guidance/advisory/CVE-2020-16898cnnvd
- https://vigilance.fr/vulnerability/Microsoft-Windows-vulnerabilities-of-October-2020-33562cnnvd
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan