Are reverse RDP attacks fixed currently?

Question

Are reverse RDP attacks fixed currently?

Adrian 1

Recently I've been given credentials for a certain Windows Server and I would like to know, being aware of past reverse RDP attacks that came into scene last year, but got reportedly fixed, whether there currently remains any known form of remote code execution (or generally, reverse RDP) attacks to the connecting clients to a Windows Server through RDP that may intentionally originate from the server.

Could you answer it precisely? Thanks

1 answer

Your answer

Answer 1

Anonymous

Hello @Adrian

I'm not very clear about the current situation about Reverse RDP attacks, but I've read from here, it suggest: 1. install Microsoft's February Patch; 2. developers need go over their programs and manually apply a patch against it.

I think you could report any issue to Microsoft Security Response Center (MSRC) Researcher Portal or Email them for more details: msrc_eng_support@microsoft.com.

Best Regards
Karlie

----------

If the Answer is helpful, please click "Accept Answer" and upvote it.

Adrian 1 Reputation point

2021-05-24T08:22:48.45+00:00

I haven't found any of the listed updates for the patch installed on my system (starting by 453..., being KB4537776 the most according to my Windows 10 version around 2020) likely because I've checked I reinstalled Windows 10 in October 2020. So, since I wasn't sure of whether I had the matching patch, I've manually checked for updates at Windows Update and also noticed I had the "apply updates from other Microsoft products" checkbox disabled, so I've enabled it just in case and, after refreshing updates I got two new ones: an WSL core update and MSVC 2013 one (nothing RDP related).

So my system should be fully up to date, hopefully. Can you or anyone confirm at least that RDP updates are included in the mandatory update targets rather than in "other Microsoft products" stream?

Thank you.
Anonymous

2021-05-26T06:40:05.483+00:00

Each cumulative update includes the changes and fixes from all previous updates.
Adrian 1 Reputation point

2021-05-26T08:49:08.343+00:00

This doesn't answer the question, but for the sake of trust, I'm going to assume yes -RDP updates are included in the mandatory updates stream- rather than in "other Microsoft products" which include Office at least. Meaning it's safe to assume everyone's Windows 10 system with up-to-date with the mandatory updates should be protected from all known reverse RDP attacks, given the patches performed last year.

Share via

Are reverse RDP attacks fixed currently?

1 answer

Your answer