Description
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows Server | 2019, 2016, 2012, 2012 R2 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 2
- Remote Desktop Gateway - 'BlueGate' Denial of Service (PoC) EDB-47963 · dos · Jan 23, 2020
- Remote Desktop Gateway - 'BlueGate' Denial of Service (PoC) EDB-47964 · dos · Jan 23, 2020
GitHub 6 repositories
-
ly4k/BlueGate ★ 250 · Jan 23, 2020
PoC (DoS + scanner) for CVE-2020-0609 & CVE-2020-0610 - RD Gateway RCE
-
ioncodes/BlueGate ★ 78 · Jan 24, 2020
PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610
-
MalwareTech/RDGScanner ★ 69 · Jan 24, 2020
A proof-of-concept scanner to check an RDG Gateway Server for vulnerabilities CVE-2020-0609 & CVE-2020-0610.
-
ruppde/rdg_scanner_cve-2020-0609 ★ 39 · Jan 21, 2020
Scanning for Remote Desktop Gateways (Potentially unpatched CVE-2020-0609 and CVE-2020-0610)
-
Archi73ct/CVE-2020-0609 ★ 2 · Jan 24, 2020
-
Bhanunamikaze/BlueGate-CVE-2020-0609 ★ 0 · Sep 7, 2026
BlueGate Exploit validator - RD Gateway validator for CVE-2020-0609 and CVE-2020-0610 (BlueGate) using OpenSSL DTLS over UDP/3391.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- SEVD-2021-285-05 Conext™ Advisor & Conext™ Control V2 Schneider Electric CPCERT · Oct 12, 2021