MS.Windows.TLS.Key.Exchange.DoS

description-logoDescription

This indicates an attack attempt to exploit a Denial of Service Vulnerability in Microsoft Windows Server.
The vulnerability is due to improper handling of certain key exchanges in TLS. A remote, unauthenticated attacker can exploit this vulnerability by sending a malicious Client Key Exchange message during a TLS handshake. Successful exploitation will cause the Windows system to abnormally reboot, resulting in a denial-of-service condition.

affected-products-logoAffected Products

Microsoft Windows 10 version 1709
Microsoft Windows 10 version 1803
Microsoft Windows 10 Version 1809
Microsoft Windows 10 version 1903
Microsoft Windows 10 Version 1909
Microsoft Windows Server 2019
Microsoft Windows Server 2019 (Server Core installation)
Microsoft Windows Server version 1803 (Server Core Installation)
Microsoft Windows Server version 1903 (Server Core installation)
Microsoft Windows Server version 1909 (Server Core installation)

Impact logoImpact

Denial of Service: Remote attackers can crash vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1118

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2020-07-22 15.892 Sig Added
2020-06-08 15.859 Default_action:pass:drop
2020-05-28 15.853