PT-2016-1044 · Microsoft · Windows 10+1

Published 2016-01-12 · Updated 2018-10-30 · CVE-2016-0019

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold and 1511

Description The issue is related to a security feature bypass in the Remote Desktop Protocol (RDP) service implementation, allowing remote attackers to bypass intended access restrictions. This can enable attackers to establish sessions for accounts with blank passwords via a modified RDP client. The vulnerability is caused by errors in security settings, which can be exploited by a remote attacker to bypass existing access restrictions or establish a connection for an account with a blank password.

Recommendations For Microsoft Windows 10 versions Gold and 1511, consider disabling the RDP service until a patch is available to prevent remote logon to accounts with no passwords set. As a temporary workaround, restrict access to accounts with blank passwords to minimize the risk of exploitation. Avoid using blank passwords for accounts to prevent potential exploitation of this issue.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2016-00111

CVE-2016-0019

Affected Products

Windows 10

Windows

References · 6

• https://bdu.fstec.ru/vul/2016-00111 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0019 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-007 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0019 · Security Note
• http://technet.microsoft.com/security/bulletin/MS16-007 · Note
• http://securitytracker.com/id/1034659 · Note