CVE-2020-0688

Microsoft Exchange Server's failure to generate unique keys allowed for remote code execution, exploited in the wild and linked to ransomware activity.

A flaw in Microsoft Exchange Server's key generation process enabled remote code execution, leading to exploitation and potential ransomware deployment. DIB organizations using vulnerable Exchange Server versions face significant exposure and compliance risks under NIST 800-171, requiring immediate patching or mitigation. Prioritize patching and review network segmentation to limit potential damage.

Shame score — The vulnerability's exploitation in ransomware attacks and Microsoft's history of similar Exchange Server flaws demonstrates a significant failure in secure development practices.