CVE-2020-0610

critical

Description

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0609.

References

https://www.tenable.com/cyber-exposure/a-look-inside-the-ransomware-ecosystem

https://www.bleepingcomputer.com/news/security/fbi-warns-of-egregor-ransomware-extorting-businesses-worldwide/

https://www.tenable.com/blog/microsoft-s-january-2020-patch-tuesday-kicks-off-the-new-year-with-49-new-cves

https://github.com/Riocipta75/lab-cve-2020-0610

https://github.com/Phemz0/UDMQueries

https://github.com/ioncodes/BlueGate

https://github.com/MalwareTech/RDGScanner

https://github.com/ly4k/BlueGate

https://github.com/ruppde/rdg_scanner_cve-2020-0609

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0610

Details

Source: Mitre, NVD

Published: 2020-01-14

Updated: 2026-06-17

Named Vulnerability: BlueGate

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.67569