Detections
Analytics
CVE-2020-16898
high
Description
<p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client.</p> <p>To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer.</p> <p>The update addresses the vulnerability by correcting how the Windows TCP/IP stack handles ICMPv6 Router Advertisement packets.</p>
From the Tenable Blog
Microsoft’s October 2020 Patch Tuesday Addresses 87 CVEs including “Bad Neighbor” Windows TCP/IP Vulnerability (CVE-2020-16898)
Published: 2020-10-13
For the first time in seven months, Microsoft patches less than 100 CVEs, addressing 87 CVEs in its October release.
References
https://github.com/aricooper/suricata-script
https://github.com/CPO-EH/CVE-2020-16898_Checker
https://github.com/initconf/CVE-2020-16898-Bad-Neighbor
https://github.com/esnet-security/cve-2020-16898
https://github.com/ZephrFish/CVE-2020-16898
https://github.com/corelight/CVE-2020-16898
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898