Bluekeep Windows Server 2003
Matthieu Kool
Along with 78 other security fixes, Microsoft released a separate advisory for CVE-2019-0708. A vulnerability in the remote desktop service dubbed BlueKeep. This vulnerability allows successful attackers to execute arbitrary code on the target machine. An attacker can then install software, view, change or delete data, or even create new user accounts. In addition to what an attacker can do, this vulnerability is also wormable. Meaning that it can be easily abused by future malware to speak across a network.
Since many servers use remote desktop services for allowing workers to connect from home, this vulnerability is extremely dangerous and should be patched as soon as possible. To add to this, currently supported operating systems are not the only ones vulnerable. Older operating systems that are no longer supported like, Windows 7, Windows Server 2008 R2, and Windows Server 2008 are also vulnerable.
Fortunately, Microsoft released new security updates, even for the old operating systems, so that they can be patched and protected. Newer operating systems also get this security patch through their usual automatic updates. Our 2019 October Patch Tuesday also contains a check for the correct windows versions.
If you do have one of the unsupported operating systems in your environment, as many do. Our color-coded BlueKeep Vulnerability Audit Report can tell you in no time which devices have the remote desktop service running and which machines also need to be patched.