EXPOSURES › CVE-2020-0618
CVE-2020-0618
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft SQL Server Reporting Services exploited a deserialization RCE vulnerability (CVE-2020-0618) allowing authenticated attackers to execute code as the service account.
An authenticated attacker exploited a deserialization flaw in Microsoft SQL Server Reporting Services to execute arbitrary code in the context of the Report Server service account. DIB orgs must ensure SQL Server Reporting Services is patched and restrict service account privileges to mitigate exposure.
Shame score — The vulnerability was actively exploited and linked to ransomware, but it was not a zero-day and required authentication to exploit.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |