In what has surfaced as a serious concern, the Australian Cyber Security Centre (ACSC) has rolled out details about a serious vulnerability in Microsoft products.
The organisation has evaluated the June 2023 security update received from the Company.
As per the details shared by ACSC on their official website:
- The Security Update repaired 78 vulnerabilities.
- There is no proof that any vulnerabilities have been used maliciously.
- Six vulnerabilities are classified as critical.
Significant Vulnerabilities Found in Microsoft
The following vulnerabilities are significant according to their severity, the extent of the associated product’s use, and/or the potential for exploitation:
1) SharePoint Privilege Elevation (CVE-2023-29357)
It is a severe vulnerability that might allow an adversary to get administrator access.
A JSON Web Token, sometimes called an authentication token, is necessary for an attacker. This token can be used by the attacker to pass as another user and gain the same level of access.
2) Exchange Remote Code Execution (CVE-2023-32031)
A confirmed attacker may attempt to launch malicious code on the exchange server.
Uncertainty exists around the level of authentication required. This might potentially execute harmful software that would let non-administrators access the system.
It is noted that this defect is “more likely” to be used, which poses a danger for Exchange Server 2016 and 2019.
3) Multiple Microsoft Message Queuing vulnerabilities (CVE-2023-29363, CVE-2023-32014, CVE-2023-32015 )
Many Critical Remote Code Execution vulnerabilities in Microsoft Message Queuing Service (MSMQ) have been patched while operating in a Pragmatic General Multicast (PGM) Server.
MSMQ is not automatically turned on. If MSMQ is running, a user may tell by looking for the “Message Queuing” service. Additionally, a user can check to see if the device’s TCP Port 1801 is open.
It is the third month in a row that a critical MSMQ vulnerability has been patched.
Recommended Mitigation Techniques
Technical subject matter experts who use Microsoft products should examine the security update instructions that are offered for those products.
Business owners and Common users should consider turning on automatic patching for Microsoft programs if they haven’t yet. They can seek help from experienced information security professionals to handle this flaw.
How can Anitech help?
Anitech’s ISMS consultants can make organisations understand the security requirements and help them implement necessary measures to overcome security vulnerabilities. Our consultants can ensure organisations and professionals patch the Microsoft security update right and will also check for any additional flaws.
To talk to our consultants, call us at 1300 802 163 or e-mail – sales@anitechgroup.com
Recent Comments