MS.Windows.TLS.Key.Exchange.DoS
Description
This indicates an attack attempt to exploit a Denial of Service Vulnerability in Microsoft Windows Server.
The vulnerability is due to improper handling of certain key exchanges in TLS. A remote, unauthenticated attacker can exploit this vulnerability by sending a malicious Client Key Exchange message during a TLS handshake. Successful exploitation will cause the Windows system to abnormally reboot, resulting in a denial-of-service condition.
Affected Products
Microsoft Windows 10 version 1709
Microsoft Windows 10 version 1803
Microsoft Windows 10 Version 1809
Microsoft Windows 10 version 1903
Microsoft Windows 10 Version 1909
Microsoft Windows Server 2019
Microsoft Windows Server 2019 (Server Core installation)
Microsoft Windows Server version 1803 (Server Core Installation)
Microsoft Windows Server version 1903 (Server Core installation)
Microsoft Windows Server version 1909 (Server Core installation)
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1118
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |
Version Updates
Date | Version | Detail |
---|---|---|
2020-07-22 | 15.892 | Sig Added |
2020-06-08 | 15.859 | Default_action:pass:drop |
2020-05-28 | 15.853 |