3 ms·
Sophos says achieving RCE is extremely difficult: https://news.sophos.com/en-us/2020/10/13/top-reason-to-apply-october-2020s-microsoft-patches-ping-of-death-red
by mrpippy 6y ago
Sophos says achieving RCE is extremely difficult: https://news.sophos.com/en-us/2020/10/13/top-reason-to-apply-october-2020s-microsoft-patches-ping-of-death-redux/ https://news.sophos.com/en-us/2020/10/13/top-reason-to-apply...
I also assume that routers won't pass ICMPv6 RAs, so limited to a single network segment. And, only affects Windows 10.
- WalterSobchak 6y agoIt's not just Windows 10.
- mrpippy 6y agoThere aren't any Windows versions before W10 1709 (or Windows Server before 2019) listed in the release.
- ingomaro 6y agoMicrosofts own CVSS score says 'attack complexity' is low. https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=...
- zxcmx 6y agoBoth can be true; BSOD is trivial, RCE can be very hard.