CVE-2020-1350: Microsoft Windows DNS Server Remote Code Execution Vulnerability

CISA Known Exploited Vulnerability (KEV)

Description

Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.

Required action (CISA)

Apply updates per vendor instructions.

Notes

Reference CISA's ED 20-03 (https://www.cisa.gov/news-events/directives/ed-20-03-mitigate-windows-dns-server-remote-code-execution-vulnerability-july-2020-patch-tuesday) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 20-03. https://nvd.nist.gov/vuln/detail/CVE-2020-1350

Weakness behind it

CISA has not recorded a CWE for this entry, so the CVE → CWE → CAPEC → ATT&CK chain cannot be walked from here. That is a gap in the catalogue, not evidence the vulnerability has no weakness class — check the NVD record below.

References

• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-1350
• KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog