Emergency Directive 20-03 – Remote code execution vulnerability in Windows DNS

This isn&#x27;t snark - I am serious.<p>Who would be running a DNS server on a Windows system ?<p>Why would they be doing such a thing ? What is the thinking here ? I understand running windows-specific infrastructure like an AD server or a PDC or whatever but ... a DNS server ?

Cybersecurity and Infrastructure Security Agency<p>Report (PDF) :<p><a href="https:&#x2F;&#x2F;cyber.dhs.gov&#x2F;assets&#x2F;report&#x2F;ed-20-03.pdf" rel="nofollow">https:&#x2F;&#x2F;cyber.dhs.gov&#x2F;assets&#x2F;report&#x2F;ed-20-03.pdf</a>

Even if your Windows DNS is not exposed to the internet, it means that anyone getting a device on your WAN can get windows domain admin.