VULNERABILITY INTELLIGENCE

CVE-2020-1118

CVSS score8.6 HIGH
EPSS probability15.15%
CISA KEVNot currently listed
Published2020-05-21
Last modified2026-08-19
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Description

A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, a remote unauthenticated attacker could send a specially crafted request to a target system utilizing TLS 1.2 or lower, triggering the system to automatically reboot. The update addresses the vulnerability by changing the way TLS key exchange messages are validated.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references