ZeroDay Findings
Sign inSign up

Findings

CVE-2020-1350

Microsoft Windows DNS Server Remote Code Execution Vulnerability

Published Jul 14, 2020 · updated Jun 16, 2026 · microsoft windows server 2008

Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.

Timeline

Detection, updates, and resolution for this record.

  1. Jul 14, 2020 · Catalog

    Detected

    Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.

  2. Nov 3, 2021 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. May 3, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.

Required action

Apply updates per vendor instructions.

CISA due date May 3, 2022

Affected

  • cpe microsoft/windows server 2008version unspecified
  • cpe microsoft/windows server 2008r2
  • cpe microsoft/windows server 2012version unspecified
  • cpe microsoft/windows server 2012r2
  • cpe microsoft/windows server 2016version unspecified
  • cpe microsoft/windows server 2019version unspecified
  • vendor Microsoft Windowsversion unspecified

Sources

  • CISA KEVCVE-2020-1350

    Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.

    cisa.gov
  • CVE.orgCVE-2020-1350

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2020-1350

    30-day exploitation probability 96.7%

    first.org
  • NIST NVDCVE-2020-1350

    A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

    nvd.nist.gov
  • Packet Storm Securityhttp://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References

CVE-2020-1350 · ZeroDay Findings