Summary
Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful exploitation allows for remote code execution. The vulnerability is also known under the moniker of BlueKeep.
- Vendor
- Microsoft
- Product
- Remote Desktop Services
- Added to KEV
- Nov 3, 2021
- Remediation due
- May 3, 2022 (US federal deadline)
- Ransomware use
- Known
- Weakness
- CWE-416
- EPSS
- 100.0% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References