![[H]ard|Forum](/styles/hardforum/xenforo/logo_dark.png){kind=logo}
- Joined
- Dec 19, 2005
- Messages
- 18,858
Real bogus!
"To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems RD Gateway via RDP.
The update addresses the vulnerability by correcting how RD Gateway handles connection requests.
Microsoft has advised users of Windows Server 2012, 2012 R2, 2016 and 2019 to install security updates, and Luca Marcelli posted video footage on Twitter showing how unpatched systems could be exploited:"
https://betanews.com/2020/01/27/windows-remote-desktop-gateway-rce-exploit/
"To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems RD Gateway via RDP.
The update addresses the vulnerability by correcting how RD Gateway handles connection requests.
Microsoft has advised users of Windows Server 2012, 2012 R2, 2016 and 2019 to install security updates, and Luca Marcelli posted video footage on Twitter showing how unpatched systems could be exploited:"
https://betanews.com/2020/01/27/windows-remote-desktop-gateway-rce-exploit/