CVE-2020-0618 - Vulnerability Details - OpenCVE

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is in the KEV database since Sept. 18, 2024.

Exploitation active

Automatable no

Technical Impact total

Vendors	Products
Microsoft	Sql Server

Configuration 1 [-]

OR	cpe:2.3:a:microsoft:sql_server:2012:sp4::::::
	cpe:2.3:a:microsoft:sql_server:2014:sp3::::::
	cpe:2.3:a:microsoft:sql_server:2016:sp2:::::x64:*

No data.

References

Link	Providers
http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html
http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618

History

Wed, 18 Sep 2024 18:30:00 +0000

Type	Values Removed	Values Added
Metrics		kev `{'dateAdded': '2024-09-18'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2020-02-11T21:22:45

Updated: 2024-09-21T03:55:32.214Z

Reserved: 2019-11-04T00:00:00

Link: CVE-2020-0618

Vulnrichment

Updated: 2024-08-04T06:11:04.564Z

NVD

Status : Analyzed

Published: 2020-02-11T22:15:13.400

Modified: 2025-04-01T21:23:31.500

Link: CVE-2020-0618

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "Microsoft SQL Server", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "2012 for 32-bit Systems Service Pack 4 (QFE)"}, {"status": "affected", "version": "2012 for x64-based Systems Service Pack 4 (QFE)"}, {"status": "affected", "version": "2016 for x64-based Systems Service Pack 2 (CU)"}]}, {"product": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "unspecified"}]}, {"product": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "unspecified"}]}, {"product": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "unspecified"}]}, {"product": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "unspecified"}]}, {"product": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "unspecified"}]}], "descriptions": [{"lang": "en", "value": "A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'."}], "problemTypes": [{"descriptions": [{"description": "Remote Code Execution", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-09-17T22:06:13", "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@microsoft.com", "ID": "CVE-2020-0618", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Microsoft SQL Server", "version": {"version_data": [{"version_value": "2012 for 32-bit Systems Service Pack 4 (QFE)"}, {"version_value": "2012 for x64-based Systems Service Pack 4 (QFE)"}, {"version_value": "2016 for x64-based Systems Service Pack 2 (CU)"}]}}, {"product_name": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)", "version": {"version_data": [{"version_value": ""}]}}, {"product_name": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)", "version": {"version_data": [{"version_value": ""}]}}, {"product_name": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)", "version": {"version_data": [{"version_value": ""}]}}, {"product_name": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)", "version": {"version_data": [{"version_value": ""}]}}, {"product_name": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)", "version": {"version_data": [{"version_value": ""}]}}]}, "vendor_name": "Microsoft"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Remote Code Execution"}]}]}, "references": {"reference_data": [{"name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618", "refsource": "MISC", "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618"}, {"name": "http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html", "refsource": "MISC", "url": "http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html"}, {"name": "http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html", "refsource": "MISC", "url": "http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T06:11:04.564Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html"}]}, {"metrics": [{"other": {"type": "kev", "content": {"dateAdded": "2024-09-18", "reference": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-09-20T00:00:00+00:00", "options": [{"Exploitation": "active"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2020-0618"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-21T03:55:32.214Z"}}]}, "cveMetadata": {"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "assignerShortName": "microsoft", "cveId": "CVE-2020-0618", "datePublished": "2020-02-11T21:22:45", "dateReserved": "2019-11-04T00:00:00", "dateUpdated": "2024-09-21T03:55:32.214Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T06:11:04.564Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "kev", "content": {"dateAdded": "2024-09-18", "reference": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2020-0618", "role": "CISA Coordinator", "options": [{"Exploitation": "active"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-18T18:04:15.991803Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-18T18:04:30.445Z"}}], "cna": {"affected": [{"vendor": "Microsoft", "product": "Microsoft SQL Server", "versions": [{"status": "affected", "version": "2012 for 32-bit Systems Service Pack 4 (QFE)"}, {"status": "affected", "version": "2012 for x64-based Systems Service Pack 4 (QFE)"}, {"status": "affected", "version": "2016 for x64-based Systems Service Pack 2 (CU)"}]}, {"vendor": "Microsoft", "product": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)", "versions": [{"status": "affected", "version": "unspecified"}]}, {"vendor": "Microsoft", "product": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)", "versions": [{"status": "affected", "version": "unspecified"}]}, {"vendor": "Microsoft", "product": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)", "versions": [{"status": "affected", "version": "unspecified"}]}, {"vendor": "Microsoft", "product": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)", "versions": [{"status": "affected", "version": "unspecified"}]}, {"vendor": "Microsoft", "product": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)", "versions": [{"status": "affected", "version": "unspecified"}]}], "references": [{"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618", "tags": ["x_refsource_MISC"]}, {"url": "http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html", "tags": ["x_refsource_MISC"]}, {"url": "http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "Remote Code Execution"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2020-09-17T22:06:13"}, "x_legacyV4Record": {"affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "2012 for 32-bit Systems Service Pack 4 (QFE)"}, {"version_value": "2012 for x64-based Systems Service Pack 4 (QFE)"}, {"version_value": "2016 for x64-based Systems Service Pack 2 (CU)"}]}, "product_name": "Microsoft SQL Server"}, {"version": {"version_data": [{"version_value": ""}]}, "product_name": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)"}, {"version": {"version_data": [{"version_value": ""}]}, "product_name": "Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)"}, {"version": {"version_data": [{"version_value": ""}]}, "product_name": "Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)"}, {"version": {"version_data": [{"version_value": ""}]}, "product_name": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)"}, {"version": {"version_data": [{"version_value": ""}]}, "product_name": "Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU)"}]}, "vendor_name": "Microsoft"}]}}, "data_type": "CVE", "references": {"reference_data": [{"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618", "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618", "refsource": "MISC"}, {"url": "http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html", "name": "http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html", "refsource": "MISC"}, {"url": "http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html", "name": "http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html", "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Remote Code Execution"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2020-0618", "STATE": "PUBLIC", "ASSIGNER": "secure@microsoft.com"}}}}, "cveMetadata": {"cveId": "CVE-2020-0618", "state": "PUBLISHED", "dateUpdated": "2024-09-21T03:55:32.214Z", "dateReserved": "2019-11-04T00:00:00", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2020-02-11T21:22:45", "assignerShortName": "microsoft"}, "dataVersion": "5.1"}

{"cisaActionDue": "2024-10-09", "cisaExploitAdd": "2024-09-18", "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "cisaVulnerabilityName": "Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability", "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:sql_server:2012:sp4:*:*:*:*:*:*", "matchCriteriaId": "D7BD8F6C-FD88-483F-95E8-16F7A6BCFCC5", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:*:*", "matchCriteriaId": "03C65D96-44D0-4411-8B84-961973F1E4D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:sql_server:2016:sp2:*:*:*:*:x64:*", "matchCriteriaId": "CDCE78A8-26F9-4F9E-BDDD-E59DEA4A3791", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de ejecuci\u00f3n de c\u00f3digo remota en Microsoft SQL Server Reporting Services cuando maneja inapropiadamente las peticiones de p\u00e1gina, tambi\u00e9n se conoce como \"Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability\"."}], "id": "CVE-2020-0618", "lastModified": "2025-04-01T21:23:31.500", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-02-11T22:15:13.400", "references": [{"source": "secure@microsoft.com", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html"}, {"source": "secure@microsoft.com", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html"}, {"source": "secure@microsoft.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618"}], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "nvd@nist.gov", "type": "Primary"}]}