Rewterz Threat Advisory – Microsoft Releases Security Updates to Address Remote Code Execution Vulnerabilities

Severity

High

Analysis Summary

CVE-2019-1181, CVE-2019-1182, CVE-2019-0708

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

Impact

• Remote code execution
• Privilege access

Affected Vendors

Microsoft

Affected Products

• Windows 7 SP1
• Windows Server 2008 R2 SP1
• Windows Server 2012
• Windows 8.1
• Windows Server 2012 R2
• Microsoft Windows 10
• Microsoft Windows Server 2016
• Microsoft Windows Server 2019

Remediation

Please see Microsoft’s release updates for the list of patches and updates.

https://portal.msrc.microsoft.com/en-us/security-guidance