Ctrl + K
/ news / CVE
CVE•Published 2020-07-14•1 article on news•6 live references•NVD data

CVE-2020-1350

Vulnerability data via CVEDB (Shodan)

CISA KEVKnown exploited in the wild.
CISA action: Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.
CVSS v3.1
10.0
CRITICAL
EPSS percentile
100
Exploit Prediction Scoring System · top 0% of all CVEs
Description

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

Timeline
Published 2020-07-14

External references

NVDMITREExploit-DBGitHub PoCtrickest/cveVulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts
vuln:CVE-2020-1350
Hosts Shodan has explicitly fingerprinted as vulnerable.
Shodan · OS
os:"Windows Server 2008"
Hosts Shodan identified as running Windows Server 2008.
More intel sources (5)
Shodan report
vuln:CVE-2020-1350
Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2020-1350
Censys host search filtered to this CVE id.
grep.app
CVE-2020-1350
Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2020-1350
GitHub code search for direct mentions.
Google dork
"CVE-2020-1350" exploit -site:nvd.nist.gov
Write-ups and news, NVD excluded.

Known PoCs on GitHub (8)

CVE-2020-13508 repos
Mr-xn/Penetration_Testing_POCHTML
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypas…
★ 7,538·updated today
joxeankoret/diaphoraPython
Diaphora, the most advanced Free and Open Source program diffing tool.
★ 4,442·updated 1d ago
jekil/awesome-hackingPython
Awesome hacking is an awesome collection of hacking tools.
★ 4,042·updated 6d ago
SexyBeast233/SecBooksHTML
安全类各家文库大乱斗
★ 1,322·updated 1y ago
superiorlu/AITreasureBoxRuby
🤖 Automatically collected AI repos, tools, websites, papers & tutorials. 实用AI百宝箱 💎
★ 877·updated today
Ostorlab/KEVunknown
Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.
★ 620·updated 3w ago
ycdxsb/WindowsPrivilegeEscalationunknown
Collection of Windows Privilege Escalation (Analyse/PoC/Exploit)
★ 477·updated 1y ago
insecrez/Bug-bounty-Writeupsunknown
Repository of Bug-Bounty Writeups
★ 431·updated 5mo ago
Articles on news mentioning CVE-2020-1350