KLA11693
ACE vulnerability in Microsoft Windows
Updated: 06/18/2020
Detect date
?
03/12/2020
Severity
?
Critical
Description

A remote code execution vulnerability in Windows SMBv3 Client/Server can be exploited remotely via specially crafted packet to execute arbitrary code.

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products

Windows 10 Version 1909 for 32-bit Systems
Windows Server, version 1903 (Server Core installation)
Windows 10 Version 1903 for 32-bit Systems
Windows Server, version 1909 (Server Core installation)
Windows 10 Version 1903 for ARM64-based Systems
Windows 10 Version 1909 for x64-based Systems
Windows 10 Version 1903 for x64-based Systems
Windows 10 Version 1909 for ARM64-based Systems

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

CVE-2020-0796

Impacts
?
ACE 
[?]
Related products
Microsoft Windows
Microsoft Windows Server
Microsoft Windows 10
CVE-IDS
?
CVE-2020-07960.0Unknown
KB list

4551762

Microsoft official advisories
Microsoft Security Update Guide