Skip to main content
Information Security

Return to Question

added link to cve
Source Link
nobody
nobody
  • 11.6k
  • 2
  • 46
  • 60

Microsoft released an emergency patch and stated that the vulnerability is being actively exploited in the wild. All the news articles describing the RCE are implying that any internet-connected computer running Windows is at risk. This can't possibly be true, can it? My question is: does the PrintNightmare RCE (CVE-2021-34527CVE-2021-34527) require a privileged position, such as a Windows user account, or at least local network access? I'm assuming regular consumer routers do not expose random ports to the internet.

Microsoft released an emergency patch and stated that the vulnerability is being actively exploited in the wild. All the news articles describing the RCE are implying that any internet-connected computer running Windows is at risk. This can't possibly be true, can it? My question is: does the PrintNightmare RCE (CVE-2021-34527) require a privileged position, such as a Windows user account, or at least local network access? I'm assuming regular consumer routers do not expose random ports to the internet.

Microsoft released an emergency patch and stated that the vulnerability is being actively exploited in the wild. All the news articles describing the RCE are implying that any internet-connected computer running Windows is at risk. This can't possibly be true, can it? My question is: does the PrintNightmare RCE (CVE-2021-34527) require a privileged position, such as a Windows user account, or at least local network access? I'm assuming regular consumer routers do not expose random ports to the internet.

Tweeted twitter.com/StackSecurity/status/1413150905545871362
Source Link
bkoodaa
bkoodaa
  • 449
  • 1
  • 4
  • 10

Who is at risk from the PrintNightmare RCE?

Microsoft released an emergency patch and stated that the vulnerability is being actively exploited in the wild. All the news articles describing the RCE are implying that any internet-connected computer running Windows is at risk. This can't possibly be true, can it? My question is: does the PrintNightmare RCE (CVE-2021-34527) require a privileged position, such as a Windows user account, or at least local network access? I'm assuming regular consumer routers do not expose random ports to the internet.