EXPOSURES › CVE-2020-1350
CVE-2020-1350
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft Windows DNS Servers suffered a remote code execution flaw (CVE-2020-1350, SIGRed) that allowed attackers to execute arbitrary code as the Local System Account.
The vulnerability in Windows DNS Servers enabled remote code execution with Local System privileges, allowing attackers to fully compromise affected systems. DIB organizations must ensure all Windows DNS Servers are patched immediately, as this flaw was actively exploited in the wild and represents a severe compliance risk under NIST 800-171 for unpatched systems.
Shame score — A critical RCE flaw in a core Windows component was actively exploited in the wild, demonstrating severe negligence in patch management and leaving systems vulnerable to full compromise.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |