Actively exploited · Published Feb 11, 2020 · Assigned by microsoft
CVE-2020-0618
Critical 9.8 Exploited Ransomware
In plain English
A critical-severity unsafe deserialization in Microsoft SQL Server from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on September 18, 2024). It has been used in ransomware campaigns. The chance it is exploited in the next 30 days is estimated at 99.0% (higher than 99.9% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei, public proof-of-concept code. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Oct 9, 2024.
Official description
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft SQL Server | 2012 for 32-bit Systems Service Pack 4 (QFE)2012 for x64-based Systems Service Pack 4 (QFE)2016 for x64-based Systems Service Pack 2 (CU) |
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR) | unspecified |
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU) | unspecified |
| Microsoft | Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR) | unspecified |
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR) | unspecified |
| Microsoft | Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU) | unspecified |
Weakness: CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618 x_refsource_MISC
- http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html x_refsource_MISC
- http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html x_refsource_MISC
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0618 government-resource