# MA-772.022020: MyCERT Advisory - Microsoft SharePoint Remote Code Execution Vulnerability (CVE-2019-0604)

**Date:** 07 Feb 2020  
**Source:** http://www.mycert.org.my/portal/advisory?id=MA-772.022020  
**Advisory ID:** MA-772.022020

---

**1.0 Introduction**
Microsoft published a security update pertaining to a Remote Code Execution vulnerability targeting Microsoft SharePoint Services. The vulnerability, (CVE-2019-0604) would allow an attacker who has successfully exploited the service, to run arbitrary code in the context of Sharepoint Application pool and the SharePoint server farm account.
**2.0 Impact**
By exploiting this vulnerability, a remote, unauthenticated attacker may be able to execute arbitrary code on vulnerable systems.
**3.0 Affected Products**
The vulnerability affects the following SharePoint Versions:
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Foundation 2010 Service Pack 2
- Microsoft SharePoint Foundation 2013 Service Pack 1
- Microsoft SharePoint Server 2010 Service Pack 2
- Microsoft SharePoint Server 2013 Service Pack 1
- Microsoft SharePoint Server 2019
**4.0 Recommendations**
Users and organizations using the affected products are advised to update and patch their systems immediately. Patches for the vulnerability can be found at Microsoft's Portal:
<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604>
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 - 8008 7000 (Office Hours)
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 -18:00 MYT
Web: <https://www.mycert.org.my>
Twitter: <https://twitter.com/mycert>
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
- <https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604>
- <https://nvd.nist.gov/vuln/detail/CVE-2019-0604>
- <https://www.cvedetails.com/cve/CVE-2019-0604/>
- <https://www.helpnetsecurity.com/2019/05/13/sharepoint-servers-attack-cve-2019-0604/>