Remote Desktop Services Remote Code Execution Vulnerability

Posted by jamie.bradford@razberi.net on Jun 5, 2019 2:04:21 PM

On May 14th 2019 Microsoft announced a Remote Desktop Services Remote Code Execution Vulnerability (CVE-2019-0708). This vulnerability affects Windows 7 and Embedded 7 32 and 64 bit version, Windows 2008 32 and 64 bit versions, and Windows 2008R2 SP1 and SP2 versions.

Left unpatched this vulnerability can allow an unauthenticated attacker to connect to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

By default, all Razberi Technologies systems with Windows Operating system images are manufactured and shipped with Remote Desktop Services or RDP in an off state.

Previous generation Razberi Technologies Rugged, MPRO, or MP systems were shipped with Windows 7 Embedded Operating System. Some special order Razberi Technologies systems may contain Windows 2008R2 SP2. If not patched, these builds are subject to this vulnerability and should be patched immediately.

You can follow this link to find your specific operating system version and
download and apply the appropriate security update.

Razberi Technologies will closely monitor this and any newly published updates related to potential vulnerabilities. Razberi will provide advisories as necessary to update our customers and community.

Topics: Vulnerability, Microsoft RDP, Remote Code Execution

READ OUR LATEST ARTICLE: The Future Direction Of Video Surveillance Security

At a Glance The Future Direction Of Video Surveillance Security 400x220

 

Read More

About Razberi Technologies

Razberi makes it simple to manage and secure video surveillance and IoT systems. Razberi’s open video surveillance platform includes intelligent appliances combined with automated cybersecurity, and health monitoring software. In combination with a wide range of top third-party video management software (VMS) applications and IP cameras, enterprises can flexibly deploy a best-of-breed solution that reduces their total cost of ownership and reduces the likelihood of a costly cyber breach. Razberi is headquartered in Dallas.

Follow Us

Recent Posts

Did you enjoy this article? Subscribe to email updates.