Is Microsoft responsible for patching customer’s virtual machines?Įach of question may lead to an analysis.If I deploy the last Windows Server image is the fix included?.

Do I have patch my Windows Virtual Desktop that uses Remote Desktop Gateway service?.

Here are some questions that are really valid: I’ve seen around the community some questions related to responsibility to patch the vulnerabilities. The best source I’d recommend is the BlueTeam cheatsheet one which collects sources from other security researches and companies. There are really a lot more related helpful articles.

CVE-2020-0601: the ChainOfFools/CurveBall attack explained with PoC.

RDP to RCE: When Fragmentation Goes Wrong.

Patch Critical Cryptographic Vulnerability in Microsoft Windows Clients and Servers.

CVE-2020-0610 | Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability.

CVE-2020-0609 | Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability.

CVE-2020-0601 | Windows CryptoAPI Spoofing Vulnerability.

I have collected materials which are helpful: Specific to CVE-2020-0601 you can check crypt32.dll. I’d assume you have basic understanding on how to patch a Windows vulnerability with KB that Microsoft provides, as well as what to verify in a minimum level to ensure the patch is in place. This article would hopefully give you a bit of information about vulnerability patching in Azure – these vulnerabilities are brought as example. For those who have Windows virtual machines especially Windows Server hosting directory service or business productivity application may have some questions that need answers. Patching these vulnerabilities is undeniably imperative.

While the crypto related vulnerability (CVE-2020-0601) may let attacker to abuse the signing certificate, the RDG vulnerability (CVE-2020-0609 & 2020-0610) sounds very dangerous as it is classified in Remote Code Execution (RCE). There are critical vulnerabilities found in the core Windows crypto functionality as well as Remote Desktop Gateway (RDG). There are a lot of buzz these days around the most recent Microsoft Tuesday Patch January 2020.

Vulnerable windows vm