Windows TCP/IP RCE Vulnerability – Patch Now
NJCCIC Advisory
Original Release Date: 10/15/2020
Summary
Microsoft recently patched a remote code execution (RCE) vulnerability in Windows TCP/IP stack handling of Internet Control Message Protocol version 6 (ICMPv6) Router Advertisement packets. Successful exploitation of the vulnerability – CVE-2020-16898 – could allow a remote threat actor to control an affected system and cause a denial-of-service condition.
Recommendations
The NJCCIC recommends applying Microsoft’s Patch Tuesday updates as soon as possible after appropriate testing or apply the mitigations provided until patching can be accomplished. More information on the vulnerability can be found in the Microsoft Security Advisory.
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.