• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Microsoft Fixes Critical RDP Security Hole, Asks Users to Patch or Risk Attacks

btarunr

Editor & Senior Moderator
Staff member
Joined
Oct 9, 2007
Messages
46,349 (7.68/day)
Location
Hyderabad, India
System Name RBMK-1000
Processor AMD Ryzen 7 5700G
Motherboard ASUS ROG Strix B450-E Gaming
Cooling DeepCool Gammax L240 V2
Memory 2x 8GB G.Skill Sniper X
Video Card(s) Palit GeForce RTX 2080 SUPER GameRock
Storage Western Digital Black NVMe 512GB
Display(s) BenQ 1440p 60 Hz 27-inch
Case Corsair Carbide 100R
Audio Device(s) ASUS SupremeFX S1220A
Power Supply Cooler Master MWE Gold 650W
Mouse ASUS ROG Strix Impact
Keyboard Gamdias Hermes E2
Software Windows 11 Pro
Among its usual chunk of updates for Windows, Office, and other products covered by Microsoft Update, Redmond released a key security update for the Remote Desktop Protocol (2671387), and asked all users to apply it as soon as possible. It asked system administrators to give the patch "special priority," given the severity of the security hole. The security hole with RDP spans across all versions of Windows, across all machine architectures. The security hole allows hackers to gain access to RDP hosts and clients. Microsoft gives it 30 days before hackers can develop malware that can exploit the security hole. Find out more about the security hole, and its patch here.



View at TechPowerUp Main Site
 

FordGT90Concept

"I go fast!1!11!1!"
Joined
Oct 13, 2008
Messages
26,259 (4.64/day)
Location
IA, USA
System Name BY-2021
Processor AMD Ryzen 7 5800X (65w eco profile)
Motherboard MSI B550 Gaming Plus
Cooling Scythe Mugen (rev 5)
Memory 2 x Kingston HyperX DDR4-3200 32 GiB
Video Card(s) AMD Radeon RX 7900 XT
Storage Samsung 980 Pro, Seagate Exos X20 TB 7200 RPM
Display(s) Nixeus NX-EDG274K (3840x2160@144 DP) + Samsung SyncMaster 906BW (1440x900@60 HDMI-DVI)
Case Coolermaster HAF 932 w/ USB 3.0 5.25" bay + USB 3.2 (A+C) 3.5" bay
Audio Device(s) Realtek ALC1150, Micca OriGen+
Power Supply Enermax Platimax 850w
Mouse Nixeus REVEL-X
Keyboard Tesoro Excalibur
Software Windows 10 Home 64-bit
Benchmark Scores Faster than the tortoise; slower than the hare.
Microsoft needs to figure out how to install updates without requiring a restart. I had to restart my server to install this and another updates. :(
 
Joined
May 21, 2008
Messages
4,113 (0.71/day)
Location
Iowa, USA
System Name THE CUBE 2.0
Processor Intel i5 13600k
Motherboard MSI MPG Z690 EDGE DDR4
Cooling Phanteks PH-TC14PE BK 2x T30-120 Fan mod mount
Memory G.Skill TridentZ 3200 MT/s C15 32GB 2x16GB
Video Card(s) Gigabyte Aorus 1080 Ti 11GB OC: Core 2GHz, Mem 5.7GHz
Storage WD SN770 250GB / 3x WD SN850X 2TB / Toshiba X300 4TB / 2x RAID1 Toshiba P300 3TB
Display(s) Samsung 49" Odyssey OLED G95SC 240Hz 5120 x 1440
Case "THE CUBE" Custom built, pure Red Alder wood
Audio Device(s) Beyerdynamic DT 880
Power Supply Corsair RM1000X
Mouse Logitech G700
Keyboard Logitech G910
Software Windows 11 Pro
Well I don't use RDP, have it disabled, but to be safe I will still install this update.
 

Wrigleyvillain

PTFO or GTFO
Joined
Oct 13, 2007
Messages
7,702 (1.28/day)
Location
Chicago
System Name DarkStar
Processor i5 3570K 4.4Ghz
Motherboard Asrock Z77 Extreme 3
Cooling Apogee HD White/XSPC Razer blocks
Memory 8GB Samsung Green 1600
Video Card(s) 2 x GTX 670 4GB
Storage 2 x 120GB Samsung 830
Display(s) 27" QNIX
Case Enthoo Pro
Power Supply Seasonic Platinum 760
Mouse Steelseries Sensei
Keyboard Ducky Pro MX Black
Software Windows 8.1 x64
Microsoft needs to figure out how to install updates without requiring a restart. I had to restart my server to install this and another updates. :(

If you update code related to services then those services will need to be restarted to utilize the new code. Or apparently in this case to be secured. Don't really see any way around that, though I'm no software developer.
 
Joined
Aug 10, 2007
Messages
4,267 (0.70/day)
Location
Sanford, FL, USA
Processor Intel i5-6600
Motherboard ASRock H170M-ITX
Cooling Cooler Master Geminii S524
Memory G.Skill DDR4-2133 16GB (8GB x 2)
Video Card(s) Gigabyte R9-380X 4GB
Storage Samsung 950 EVO 250GB (mSATA)
Display(s) LG 29UM69G-B 2560x1080 IPS
Case Lian Li PC-Q25
Audio Device(s) Realtek ALC892
Power Supply Seasonic SS-460FL2
Mouse Logitech G700s
Keyboard Logitech G110
Software Windows 10 Pro
If you update code related to services then those services will need to be restarted to utilize the new code. Or apparently in this case to be secured. Don't really see any way around that, though I'm no software developer.

Actually, that is the solution :)

If Windows Update could automatically stop>update>start services, then many full system restarts wouldn't be necessary.

I know some people who've done this manually to minimize downtime and/or have a remarkable up time.
 
Joined
Nov 13, 2004
Messages
455 (0.06/day)
Location
Canada/quebec/Montreal
System Name Custom DIY
Processor Intel i7 2600K @ 4.8 Turbo 1.4v
Motherboard Asus P8Z68-V Pro 8801
Cooling XSPC RS240 + 120mm Rad/fan
Memory Corsair 1866 Vangence 9-10-9-27-2T
Video Card(s) 2X EVGA GTX570 SLI
Storage OCZ Revodrive 110GB + 2x1TB seagate
Display(s) ASUS MT276HE
Case CoolerMaster Sniper
Audio Device(s) X-Fi Titanium Fatal1ty Professional Series
Power Supply ANTEC TP-750 Blue 750Watts
Software win7 64
Benchmark Scores http://3dmark.com/3dm11/1347866
Microsoft needs to figure out how to install updates without requiring a restart. I had to restart my server to install this and another updates. :(

Actually, that is the solution :)

If Windows Update could automatically stop>update>start services, then many full system restarts wouldn't be necessary.

I know some people who've done this manually to minimize downtime and/or have a remarkable up time.

oh yeah, just ad a crazy morning,. having to restart 4 servers here, and when you do that you have the phone ringing non stop ... lots of fun

we really need a restart less windows server... like the linux server.... this is driving me crazy considering that each windows server have like 6 vm runing on each ..... its a pain!
 

trickson

OH, I have such a headache
Joined
Dec 5, 2004
Messages
7,595 (1.07/day)
Location
Planet Earth.
System Name Ryzen TUF.
Processor AMD Ryzen7 3700X
Motherboard Asus TUF X570 Gaming Plus
Cooling Noctua
Memory Gskill RipJaws 3466MHz
Video Card(s) Asus TUF 1650 Super Clocked.
Storage CB 1T M.2 Drive.
Display(s) 73" Soney 4K.
Case Antech LanAir Pro.
Audio Device(s) Denon AVR-S750H
Power Supply Corsair TX750
Mouse Optical
Keyboard K120 Logitech
Software Windows 10 64 bit Home OEM
Got it. Windows always updates for me automatically! And I also have this turned off. No need for it.
 

eidairaman1

The Exiled Airman
Joined
Jul 2, 2007
Messages
40,435 (6.59/day)
Location
Republic of Texas (True Patriot)
System Name PCGOD
Processor AMD FX 8350@ 5.0GHz
Motherboard Asus TUF 990FX Sabertooth R2 2901 Bios
Cooling Scythe Ashura, 2×BitFenix 230mm Spectre Pro LED (Blue,Green), 2x BitFenix 140mm Spectre Pro LED
Memory 16 GB Gskill Ripjaws X 2133 (2400 OC, 10-10-12-20-20, 1T, 1.65V)
Video Card(s) AMD Radeon 290 Sapphire Vapor-X
Storage Samsung 840 Pro 256GB, WD Velociraptor 1TB
Display(s) NEC Multisync LCD 1700V (Display Port Adapter)
Case AeroCool Xpredator Evil Blue Edition
Audio Device(s) Creative Labs Sound Blaster ZxR
Power Supply Seasonic 1250 XM2 Series (XP3)
Mouse Roccat Kone XTD
Keyboard Roccat Ryos MK Pro
Software Windows 7 Pro 64
I knew anything related to remote registry/desktop is a major threat. These services should only be used if youre behind a hardware firewall/proxy/intranet/ethernet.
 
Joined
Sep 3, 2010
Messages
3,527 (0.71/day)
Location
Netherlands
System Name desktop | Odroid N2+ |
Processor AMD Ryzen 5 3600 | Amlogic S922X |
Motherboard Gigabyte B550M DS3H |Odroid N2+ |
Cooling Inter-Tech Argus SU-200, 3x Arctic P12 case fans | stock heatsink + fan |
Memory Gskill Aegis DDR4 32GB | 4 GB DDR4 |
Video Card(s) Sapphire Pulse RX 6600 (8GB) | Arm Mali G52 |
Storage SK Hynix SSD 240GB, Samsung 840 EVO 250 GB, Toshiba DT01ACA100 1T | Samsung 850 Evo 500GB |
Display(s) AOC G2260VWQ6 | LG 24MT57D |
Case Asus Prime 201 | Stock case (black version) |
Audio Device(s) integrated
Power Supply BeQuiet! Pure Power 11 400W | 12v barrel jack |
Mouse Logitech G500 |Steelseries Rival 300
Keyboard Qpad MK-50 (Cherry MX brown)| Blaze Keyboard
Software Windows 10, Various Linux distros | Gentoo Linux
Microsoft needs to figure out how to install updates without requiring a restart. I had to restart my server to install this and another updates. :(

Indeed, if it is possible with Linux then why not with Windows? Only if the kernel will get modified by the updates/new drivers, a restart should be necessary.

Silly Windows...
 
Joined
Nov 29, 2004
Messages
588 (0.08/day)
System Name Blue Beast 2.0
Processor AMD Ryzen 9 3900XT
Motherboard Gigabyte X570 AORUS MASTER
Cooling EK EK-AIO 360 D-RGB
Memory G.Skill Trident Z Neo 32 GB (2 x 16 GB) DDR4-3600 CL16
Video Card(s) EVGA RTX 3090 Ultra Gaming Hybrid
Storage Seagate FireCuda 520 500GB NVME, Western Digital SN750 1TB NVME, Western Digital SN850 1TB NVME
Display(s) AOC AG271QG, Dell UltraSharp U2414H
Case Lian Li PC-O11 Dynamic - Black
Audio Device(s) Asus Xonar DGX PCI-E 5.1
Power Supply Corsair HX850i
Mouse Logitech G502 HERO
Keyboard Corsair Strafe MK.2 Cherry MX Silent
Software Windows 10 Pro 64bit
oh yeah, just ad a crazy morning,. having to restart 4 servers here, and when you do that you have the phone ringing non stop ... lots of fun


That's why you restart them after hours, if at all possible. Last thing I want is the owner coming to me saying his email isn't working while I wait 30 minutes for our SBS 08 server to restart. :shadedshu


As with others I don't understand why no restarting is required in Linux while it is required in Windows?
 
Joined
Oct 8, 2009
Messages
2,047 (0.39/day)
Location
Republic of Texas
Processor R9 5950x
Motherboard Asus x570 Crosshair VIII Formula
Cooling EK 360mm AIO D-RGB
Memory G.Skill Trident Z Neo 2x16gb (CL16@3800MHz)
Video Card(s) PNY GeForce RTX 3090 24GB
Storage Samsung 970 EVO Plus 1TB NVMe | Intel 660p 2TB NVMe
Display(s) Acer Predator XB323QK 4K 144Hz
Case Corsair 5000D Airflow
Audio Device(s) Objective2 Amp/DAC | GoXLR | AKG K612PRO | Beyerdynamic DT880| Rode Pod Mic
Power Supply Corsair AX 850w
Mouse Razer DeathAdder Elite V2
Keyboard Corsair K95 Platinum RGB "Cherry MX Brown"
VR HMD Oculus Rift
Software Window 11 Pro
have to remote connect to our office server to patch RDP, irony :laugh:
 

newtekie1

Semi-Retired Folder
Joined
Nov 22, 2005
Messages
28,472 (4.24/day)
Location
Indiana, USA
Processor Intel Core i7 10850K@5.2GHz
Motherboard AsRock Z470 Taichi
Cooling Corsair H115i Pro w/ Noctua NF-A14 Fans
Memory 32GB DDR4-3600
Video Card(s) RTX 2070 Super
Storage 500GB SX8200 Pro + 8TB with 1TB SSD Cache
Display(s) Acer Nitro VG280K 4K 28"
Case Fractal Design Define S
Audio Device(s) Onboard is good enough for me
Power Supply eVGA SuperNOVA 1000w G3
Software Windows 10 Pro x64
have to remote connect to our office server to patch RDP, irony :laugh:

Yeah, I had to RDP into my servers to apply the patch as well.:roll:
 
Top