PT-2014-1027 · Microsoft · Windows 8.1+4
Andrew Swoboda
+1
·
Publicado
2014-06-10
·
Atualizado
2019-05-15
·
CVE-2014-0296
CVSS v2.0
5.1
Média
| Vetor | AV:N/AC:H/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows versions prior to the fixed version
Windows 7 SP1
Windows 8
Windows 8.1
Windows Server 2012 Gold and R2
Description
The issue is related to a tampering vulnerability in the Remote Desktop Protocol (RDP) implementation, which does not properly encrypt sessions. This makes it easier for man-in-the-middle attackers to obtain sensitive information by sniffing the network or modify session content by sending crafted RDP packets.
Recommendations
For Microsoft Windows 7 SP1, update to a version that includes the fix for the RDP MAC issue.
For Windows 8, apply the necessary configuration changes to properly encrypt RDP sessions.
For Windows 8.1, ensure that the RDP implementation is updated to prevent tampering.
For Windows Server 2012 Gold and R2, modify the RDP settings to secure the sessions and prevent man-in-the-middle attacks.
As a temporary workaround, consider restricting access to RDP sessions until a patch is available.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows
Windows 7
Windows 8
Windows 8.1
Windows Server 2012