CVE-2020-0688
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
- Published
- Feb 11, 2020
- Updated
- Oct 21, 2025
- Assigning CNA
- microsoft
- Evidence observed
- Mar 2, 2020
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HHigh · next 30 days
- Percentile
- 100.0%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
CISA Known Exploited
This CVE appears in the CISA Known Exploited Vulnerabilities catalog.
Summary
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.
Sources
modules/exploits/windows/http/exchange_ecp_viewstate.rb
Metasploit Framework modulesDeclared conditions
- platform: Windows($.exploit_windows/http/exchange_ecp_viewstate.platform)
- verification: check_declared($.exploit_windows/http/exchange_ecp_viewstate.check)
- CVE-2020-0688Exploit
CVE-2020-0688_Microsoft Exchange default MachineKeySection deserialize vulnerability
- CVE-2020-0688Scanner
Scans networks for Microsoft Exchange servers vulnerable to CVE-2020-0688, using zmap for host discovery and TLS/version fingerprinting to identify unpatched instances.
- CVE-2020-0688Exploit
CVE-2020-0688 - Exchange
PoC for Forgot2kEyXCHANGE (CVE-2020-0688) written in PowerShell
- CVE-2020-0688Exploit
Proof-of-concept exploit for CVE-2020-0688 providing remote code execution and reverse bind shell against Microsoft Exchange servers.
- Exploit_CVE-2020-0688Exploit
CVE-2020-0688 "Microsoft Exchange default MachineKeySection deserialize vulnerability"
- CVE-2020-0688Exploit
Remote Code Execution on Microsoft Exchange Server through fixed cryptographic keys
[CVE-2020-0688] Microsoft Exchange Server Fixed Cryptographic Key Remote Code Execution (RCE)
- CVE-2020-0688-ScannerScanner
Quick tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method.
- cve-2020-0688Exploit
cve-2020-0688
- cve-2020-0688Exploit
cve-2020-0688
- CVE-2020-0688Exploit
CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys
- CVE-2020-0688-GUIExploit
GUI Exploit Tool for CVE-2020-0688(Microsoft Exchange default MachineKeySection deserialize vulnerability)
cve-2020-0688 UNIVERSAL Python implementation utilizing ASPX webshell for command output
- CVE-2020-0688_EXPExploit
CVE-2020-0688_EXP Auto trigger payload & encrypt method
- CVE-2020-0688Exploit
Exploit and detect tools for CVE-2020-0688
- ecp_slapExploit
CVE-2020-0688 PoC
- CVE-2020-0688-Python3Exploit
Exploit updated to use Python 3.
- CVE-2020-0688Scanner
PHP CLI script that scans single hosts or IP ranges to detect Exchange servers vulnerable to CVE-2020-0688 by checking installed cumulative updates.
- cve-2020-0688Exploit
I made this script for conducting CVE-2020-0688 more rapidly. It helps to improve checking the vuln, reducing hugely steps for that
- CVE-2020-0688Exploit
CVE-2020-0688
Photubias · windows · Mar 2, 2020
Metasploit · windows · Mar 5, 2020
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.