CVE-2020-16894

Description


A remote code execution vulnerability exists when Windows Network Address Translation (NAT) fails to properly handle UDP traffic, aka 'Windows NAT Remote Code Execution Vulnerability'.

CvssV3 impact


BaseSeverity

HIGH

ConfidentialityImpact

NONE

AttackComplexity

LOW

Scope

CHANGED

AttackVector

NETWORK

AvailabilityImpact

HIGH

IntegrityImpact

NONE

PrivilegesRequired

LOW

BaseScore

7.7

VectorString

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Version

3.1

UserInteraction

NONE

CvssV2 impact


AccessComplexity

LOW

ConfidentialityImpact

NONE

AvailabilityImpact

COMPLETE

IntegrityImpact

NONE

BaseScore

6.8

VectorString

AV:N/AC:L/Au:S/C:N/I:N/A:C

Version

2.0

AccessVector

NETWORK

Authentication

SINGLE