{"schema":"threatline.record/2","record":{"id":"CVE-2020-1350","aliases":[],"summary":"Microsoft Windows DNS Server Remote Code Execution Vulnerability","details":"Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.","categories":["Operating systems"],"product":"Windows","vendor":"Microsoft","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2020-1350","source_modified_at":"2025-10-21T23:35:39.529Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Windows Server","vendor":"Microsoft","versions":[{"status":"affected","version":"2019"},{"status":"affected","version":"2019  (Core installation)"},{"status":"affected","version":"2016"},{"status":"affected","version":"2016  (Core installation)"},{"status":"affected","version":"2008 for 32-bit Systems Service Pack 2"},{"status":"affected","version":"2008 for 32-bit Systems Service Pack 2 (Core installation)"},{"status":"affected","version":"2008 for x64-based Systems Service Pack 2"},{"status":"affected","version":"2008 for x64-based Systems Service Pack 2 (Core installation)"},{"status":"affected","version":"2008 R2 for x64-based Systems Service Pack 1"},{"status":"affected","version":"2008 R2 for x64-based Systems Service Pack 1 (Core installation)"},{"status":"affected","version":"2012"},{"status":"affected","version":"2012 (Core installation)"},{"status":"affected","version":"2012 R2"},{"status":"affected","version":"2012 R2 (Core installation)"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2020-1350","source_modified_at":"2025-10-21T23:35:39.529Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Windows Server, version 1909 (Server Core installation)","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2020-1350","source_modified_at":"2025-10-21T23:35:39.529Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Windows Server, version 1903 (Server Core installation)","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2020-1350","source_modified_at":"2025-10-21T23:35:39.529Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Windows Server, version 2004 (Server Core installation)","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}],"defaultStatus":null}],"fixed_versions":[],"cvss":10,"severity":"Critical","kev":{"listed":true,"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.96721,"percentile":0.99887,"score_date":"2026-10-23"},"published_at":"2020-07-14T22:54:06.000Z","modified_at":"2025-10-21T23:35:39.529Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2020-1350","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2025-10-21T23:35:39.529Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1350","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350","tags":["x_refsource_MISC","x_transferred"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1350","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CISA ADP","ssvc":{"exploitation":"active","automatable":"yes","technical_impact":"total","assessed_at":"2025-02-07T14:38:31.758044Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2025-10-21T23:35:39.529Z","content_hash":"00eb3fb79163cbb2583c4475371df8ebac495b18f94eba91d199fa3f1749d0b3"}}